This update for MozillaFirefox to ESR 52.8 release fixes the following issues: Update to Firefox ESR 52.8 (bsc#1092548) Security issues fixed :

  - MFSA 2018-12/CVE-2018-5159: Integer overflow and     out-of-bounds write in Skia

  - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject     JavaScript into PDF Viewer

  - MFSA 2018-12/CVE-2018-5168: Lightweight themes can be     installed without user interaction

  - MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in     Firefox 60 and Firefox ESR 52.8

  - MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG     animations and text paths

  - MFSA 2018-12/CVE-2018-5183: Backport critical security     fixes in Skia

  - MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF     Viewer to view protected PDF files

  - MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG     animations and clip paths

  - MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8     to Unicode string conversion through legacy extension

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:1319-1)

critical Nessus Plugin ID 109887

Version 1.11