This update for MozillaFirefox fixes the following issues :

Firefox Extended Support Release 68.5.0 ESR

  - CVE-2020-6796 (bmo#1610426) Missing bounds check on     shared memory read in the parent process

  - CVE-2020-6797 (bmo#1596668) Extensions granted     downloads.open permission could open arbitrary     applications on Mac OSX

  - CVE-2020-6798 (bmo#1602944) Incorrect parsing of     template tag could result in JavaScript injection

  - CVE-2020-6799 (bmo#1606596) Arbitrary code execution     when opening pdf links from other applications, when     Firefox is configured as default pdf reader

  - CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,     bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)     Memory safety bugs fixed in Firefox 73 and Firefox ESR     68.5

  - Fixed: Fixed various issues opening files with spaces in     their path (bmo#1601905, bmo#1602726)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:0384-1)

high Nessus Plugin ID 133762

Version 1.7