Security update for MozillaFirefox
This update for MozillaFirefox, mozilla-nss fixes the following issues:
Security issues fixed:
- CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream (bsc#1122983).
- CVE-2018-18501: Fixed multiple memory safety bugs (bsc#1122983).
- CVE-2018-18505: Fixed a privilege escalation through IPC channel messages (bsc#1122983).
- CVE-2018-12404: Cache side-channel variant of the Bleichenbacher attack (bsc#1119069).
Non-security issue fixed:
- Update to MozillaFirefox ESR 60.5.0
- Update to mozilla-nss 3.41.1
This update was imported from the SUSE:SLE-15:Update update project.
- Submitted by Charles Robertson (cgrobertson)
Fixed bugs
bnc#1120374
SLED12SP3 - Wrong Firefox GUI Language (Firefox ESR 60.4.0)
bnc#1122983
VUL-0: MozillaFirefox: 65, 60.5, Thunderbird 60.5
bnc#1119069
VUL-0: CVE-2018-12404: mozilla-nss: nss: Cache side-channel variant of the Bleichenbacher attack