This update for MozillaFirefox fixes the following issues :

Firefox Extended Support Release 78.6.0 ESR

  - Fixed: Various stability, functionality, and security     fixes MFSA 2020-55 (bsc#1180039)

  - CVE-2020-16042 (bmo#1679003) Operations on a BigInt     could have caused uninitialized memory to be exposed

  - CVE-2020-26971 (bmo#1663466) Heap buffer overflow in     WebGL

  - CVE-2020-26973 (bmo#1680084) CSS Sanitizer performed     incorrect sanitization

  - CVE-2020-26974 (bmo#1681022) Incorrect cast of     StyleGenericFlexBasis resulted in a heap use-after-free

  - CVE-2020-26978 (bmo#1677047) Internal network hosts     could have been probed by a malicious webpage

  - CVE-2020-35111 (bmo#1657916) The proxy.onRequest API did     not catch view-source URLs

  - CVE-2020-35112 (bmo#1661365) Opening an extension-less     download may have inadvertently launched an executable     instead

  - CVE-2020-35113 (bmo#1664831, bmo#1673589) Memory safety     bugs fixed in Firefox 84 and Firefox ESR 78.6

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:3901-1)

high Nessus Plugin ID 144532

Version 1.6