Every CVESearch/Get API key

openSUSE-SU-2020:1042-1

Security update for MozillaFirefox

No scoreFix available

openSUSE-SU-2020:1042-1 is a vulnerability with no CVSS score yet in MozillaFirefox, published July 23, 2020. No source lists public exploit code. Fixed in MozillaFirefox 78.0.2-lp151.2.57.1.

Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
78.0.2-lp151.2.57.1MozillaFirefox

Description

This update for MozillaFirefox fixes the following issues:

  • Mozilla Firefox 78.0.2 MFSA 2020-28 (bsc#1173948)
    • MFSA-2020-0003 (bmo#1644076) X-Frame-Options bypass using object or embed tags
  • Firefox Extended Support Release 78.0.2esr ESR
    • Fixed: Security fix
    • Fixed: Fixed an accessibility regression in reader mode (bmo#1650922)
    • Fixed: Made the address bar more resilient to data corruption in the user profile (bmo#1649981)
    • Fixed: Fixed a regression opening certain external applications (bmo#1650162)

This update was imported from the SUSE:SLE-15:Update update project.

Affected packages

Affected packages
PackageAffectedFixed
MozillaFirefox
openSUSE:Leap 15.1
before 78.0.2-lp151.2.57.1
78.0.2-lp151.2.57.1

What each source reports

OSVNo score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Mozilla Firefox 78.0.2 MFSA 2020-28 (bsc#1173948)
    • MFSA-2020-0003 (bmo#1644076) X-Frame-Options bypass using object or embed tags
  • Firefox Extended Support Release 78.0.2esr ESR
    • Fixed: Security fix
    • Fixed: Fixed an accessibility regression in reader mode (bmo#1650922)
    • Fixed: Made the address bar more resilient to data corruption in the user profile (bmo#1649981)
    • Fixed: Fixed a regression opening certain external applications (bmo#1650162)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:1042-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open