Уведомление безопасности openSUSE-SU-2018:2996-1

Высокая (6.4)

(AV:N/AC:L/Au:N/C:P/I:N/A:P)

SUSE

MozillaFirefox (any) MozillaFirefox-branding-upstream (any) MozillaFirefox-buildsymbols (any) MozillaFirefox-debuginfo (any) MozillaFirefox-debugsource (any) MozillaFirefox-devel (any) MozillaFirefox-translations-common (any) MozillaFirefox-translations-other (any)

Уведомление безопасности об уязвимостях openSUSE Leap 15.0, openSUSE Leap 42.3

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE Leap 15.0:
x86_64:
MozillaFirefox-buildsymbols - 60.2.2-lp150.3.23.1
MozillaFirefox-branding-upstream - 60.2.2-lp150.3.23.1
MozillaFirefox-translations-other - 60.2.2-lp150.3.23.1
MozillaFirefox-debuginfo - 60.2.2-lp150.3.23.1
MozillaFirefox-devel - 60.2.2-lp150.3.23.1
MozillaFirefox-debugsource - 60.2.2-lp150.3.23.1
MozillaFirefox - 60.2.2-lp150.3.23.1
MozillaFirefox-translations-common - 60.2.2-lp150.3.23.1
openSUSE Leap 42.3:
x86_64:
MozillaFirefox-debuginfo - 60.2.2-118.1
MozillaFirefox-translations-other - 60.2.2-118.1
MozillaFirefox - 60.2.2-118.1
MozillaFirefox-buildsymbols - 60.2.2-118.1
MozillaFirefox-devel - 60.2.2-118.1
MozillaFirefox-translations-common - 60.2.2-118.1
MozillaFirefox-branding-upstream - 60.2.2-118.1
MozillaFirefox-debugsource - 60.2.2-118.1

http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00002.html
https://bugzilla.suse.com/1110506
https://bugzilla.suse.com/1110507

Источник: CVE
Наименование: CVE-2018-12387
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12387

Источник: CVE
Наименование: CVE-2018-12386
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12386