This update for MozillaFirefox fixes the following issues :

Mozilla Firefox was updated to 78.10.0 ESR (bsc#1184960)

  - CVE-2021-23994: Out of bound write due to lazy     initialization

  - CVE-2021-23995: Use-after-free in Responsive Design Mode

  - CVE-2021-23998: Secure Lock icon could have been spoofed

  - CVE-2021-23961: More internal network hosts could have     been probed by a malicious webpage

  - CVE-2021-23999: Blob URLs may have been granted     additional privileges

  - CVE-2021-24002: Arbitrary FTP command execution on FTP     servers using an encoded URL

  - CVE-2021-29945: Incorrect size computation in     WebAssembly JIT could lead to null-reads

  - CVE-2021-29946: Port blocking could be bypassed

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:1433-1)

high Nessus Plugin ID 149180

Version 1.4