CVE-2020-15655

This update for MozillaFirefox fixes the following issues:

• Firefox Extended Support Release 78.1.0 ESR
  • Fixed: Various stability, functionality, and security fixes (bsc#1174538)
  • CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker
  • CVE-2020-6514: WebRTC data channel leaks internal address to peer
  • CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy
  • CVE-2020-15653: Bypassing iframe sandbox when allowing popups
  • CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  • CVE-2020-15656: Type confusion for special arguments in IonMonkey
  • CVE-2020-15658: Overriding file type when saving to disk
  • CVE-2020-15657: DLL hijacking due to incorrect loading path
  • CVE-2020-15654: Custom cursor can overlay user interface
  • CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1

This update was imported from the SUSE:SLE-15:Update update project.

This update for MozillaFirefox fixes the following issues:

• Firefox Extended Support Release 78.1.0 ESR
  • Fixed: Various stability, functionality, and security fixes (bsc#1174538)
  • CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker
  • CVE-2020-6514: WebRTC data channel leaks internal address to peer
  • CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy
  • CVE-2020-15653: Bypassing iframe sandbox when allowing popups
  • CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  • CVE-2020-15656: Type confusion for special arguments in IonMonkey
  • CVE-2020-15658: Overriding file type when saving to disk
  • CVE-2020-15657: DLL hijacking due to incorrect loading path
  • CVE-2020-15654: Custom cursor can overlay user interface
  • CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1

This update was imported from the SUSE:SLE-15:Update update project.

This update for MozillaFirefox fixes the following issues:

This update for MozillaFirefox and pipewire fixes the following issues:

MozillaFirefox Extended Support Release 78.1.0 ESR

• Fixed: Various stability, functionality, and security fixes (bsc#1174538)
• CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker
• CVE-2020-6514: WebRTC data channel leaks internal address to peer
• CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy
• CVE-2020-15653: Bypassing iframe sandbox when allowing popups
• CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
• CVE-2020-15656: Type confusion for special arguments in IonMonkey
• CVE-2020-15658: Overriding file type when saving to disk
• CVE-2020-15657: DLL hijacking due to incorrect loading path
• CVE-2020-15654: Custom cursor can overlay user interface
• CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1

pipewire was updated to version 0.3.6 (bsc#1171433, jsc#ECO-2308):

• Extensive memory leak fixing and stress testing was done. A big leak in screen sharing with DMA-BUF was fixed.
• Compile fixes
• Stability improvements in jack and pulseaudio layers.
• Added the old portal module to make the Camera portal work again. This will be moved to the session manager in future versions.
• Improvements to the GStreamer source and sink shutdown.
• Fix compatibility with v2 clients again when negotiating buffers.

This update was imported from the SUSE:SLE-15-SP2:Update update project.

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

This update for MozillaFirefox fixes the following issues:

• Fix broken translation-loading (boo#1173991)

  • allow addon sideloading
  • mark signatures for langpacks non-mandatory
  • do not autodisable user profile scopes

• Google API key is not usable for geolocation service any more

• Mozilla Firefox 78.1 ESR

  • Fixed: Various stability, functionality, and security fixe (MFSA 2020-32) (bsc#1174538).
  • CVE-2020-15652 (bmo#1634872) Potential leak of redirect targets when loading scripts in a worker
  • CVE-2020-6514 (bmo#1642792) WebRTC data channel leaks internal address to peer
  • CVE-2020-15655 (bmo#1645204) Extension APIs could be used to bypass Same-Origin Policy
  • CVE-2020-15653 (bmo#1521542) Bypassing iframe sandbox when allowing popups
  • CVE-2020-6463 (bmo#1635293) Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  • CVE-2020-15656 (bmo#1647293) Type confusion for special arguments in IonMonkey
  • CVE-2020-15658 (bmo#1637745) Overriding file type when saving to disk
  • CVE-2020-15657 (bmo#1644954) DLL hijacking due to incorrect loading path
  • CVE-2020-15654 (bmo#1648333) Custom cursor can overlay user interface
  • CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613, bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787, bmo#1649347, bmo#1650811, bmo#1651678) Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1

• Add sle11-icu-generation-python3.patch to fix icu-generation on big endian platforms

• Mozilla Firefox 78.0.2 ESR

  • MFSA 2020-28 (bsc#1173948)
  • MFSA-2020-0003 (bmo#1644076) X-Frame-Options bypass using object or embed tags
  • Fixed: Fixed an accessibility regression in reader mode (bmo#1650922)
  • Fixed: Made the address bar more resilient to data corruption in the user profile (bmo#1649981)
  • Fixed: Fixed a regression opening certain external applications (bmo#1650162)

This update for MozillaFirefox fixes the following issues:

• Firefox Extended Support Release 78.1.0 ESR
  • Fixed: Various stability, functionality, and security fixes (bsc#1174538)
  • CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker
  • CVE-2020-6514: WebRTC data channel leaks internal address to peer
  • CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy
  • CVE-2020-15653: Bypassing iframe sandbox when allowing popups
  • CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  • CVE-2020-15656: Type confusion for special arguments in IonMonkey
  • CVE-2020-15658: Overriding file type when saving to disk
  • CVE-2020-15657: DLL hijacking due to incorrect loading path
  • CVE-2020-15654: Custom cursor can overlay user interface
  • CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1

This update for MozillaFirefox fixes the following issues:

• Firefox Extended Support Release 78.1.0 ESR
  • Fixed: Various stability, functionality, and security fixes (bsc#1174538)
  • CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker
  • CVE-2020-6514: WebRTC data channel leaks internal address to peer
  • CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy
  • CVE-2020-15653: Bypassing iframe sandbox when allowing popups
  • CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  • CVE-2020-15656: Type confusion for special arguments in IonMonkey
  • CVE-2020-15658: Overriding file type when saving to disk
  • CVE-2020-15657: DLL hijacking due to incorrect loading path
  • CVE-2020-15654: Custom cursor can overlay user interface
  • CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1

This update for MozillaFirefox fixes the following issues:

This update for MozillaFirefox and pipewire fixes the following issues:

MozillaFirefox Extended Support Release 78.1.0 ESR

• Fixed: Various stability, functionality, and security fixes (bsc#1174538)
• CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker
• CVE-2020-6514: WebRTC data channel leaks internal address to peer
• CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy
• CVE-2020-15653: Bypassing iframe sandbox when allowing popups
• CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
• CVE-2020-15656: Type confusion for special arguments in IonMonkey
• CVE-2020-15658: Overriding file type when saving to disk
• CVE-2020-15657: DLL hijacking due to incorrect loading path
• CVE-2020-15654: Custom cursor can overlay user interface
• CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1

pipewire was updated to version 0.3.6 (bsc#1171433, jsc#ECO-2308):

• Extensive memory leak fixing and stress testing was done. A big leak in screen sharing with DMA-BUF was fixed.
• Compile fixes
• Stability improvements in jack and pulseaudio layers.
• Added the old portal module to make the Camera portal work again. This will be moved to the session manager in future versions.
• Improvements to the GStreamer source and sink shutdown.
• Fix compatibility with v2 clients again when negotiating buffers.

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass iframe sandbox restrictions, confuse the user, or execute arbitrary code. (CVE-2020-6463, CVE-2020-6514, CVE-2020-15652, CVE-2020-15653, CVE-2020-15654, CVE-2020-15656, CVE-2020-15658, CVE-2020-15659)

It was discovered that redirected HTTP requests which are observed or modified through a web extension could bypass existing CORS checks. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit this to obtain sensitive information across origins. (CVE-2020-15655)