Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
- Firefox Extended Support Release 78.8.0 ESR
* Fixed: Various stability, functionality, and security fixes
MFSA 2021-08 (bsc#1182614)
* CVE-2021-23969: Content Security Policy violation report could have contained the destination of a redirect
* CVE-2021-23968: Content Security Policy violation report could have contained the destination of a redirect
* CVE-2021-23973: MediaError message property could have leaked information about cross-origin resources
* CVE-2021-23978: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
This update was imported from the SUSE:SLE-15-SP2:Update update project.
-
Submitted by
Charles Robertson (cgrobertson)
Fixed bugs
bnc#1182614
VUL-0: MozillaFirefox / MozillaThunderbird: update to 86 and 78.8.0esr
bnc#1182357
AUDIT-FIND: MozillaFirefox, MozillaThunderbird: packaging helper uses http instead of https
