This update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130) :

  - CVE-2018-5125: Memory safety bugs fixed in Firefox 59     and Firefox ESR 52.7

  - CVE-2018-5127: Buffer overflow manipulating SVG     animatedPathSegList

  - CVE-2018-5129: Out-of-bounds write with malformed IPC     messages

  - CVE-2018-5130: Mismatched RTP payload type can trigger     memory corruption

  - CVE-2018-5131: Fetch API improperly returns cached     copies of no-store/no-cache resources

  - CVE-2018-5144: Integer overflow during Unicode     conversion

  - CVE-2018-5145: Memory safety bugs fixed in Firefox ESR     52.7

  - CVE-2018-5146: Out of bounds memory write in libvorbis     (bsc#1085671)

  - CVE-2018-5147: Out of bounds memory write in libtremor     (bsc#1085671)

  - CVE-2018-5148: Use-after-free in compositor (MFSA     2018-10) (bsc#1087059)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:0907-1)

critical Nessus Plugin ID 109000

Version 1.10