Mageia alert MGASA-2018-0393 (firefox)

From:
             
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
             
 
updates-announce@ml.mageia.org 
Subject:
             
 
[updates-announce] MGASA-2018-0393: Updated firefox packages fix security vulnerability 
Date:
             
 
Mon, 1 Oct 2018 10:45:30 +0200
Message-ID:
             
 
<20181001084530.5188F9FABB@duvel.mageia.org>
MGASA-2018-0393 - Updated firefox packages fix security vulnerability

Publication date: 01 Oct 2018
URL: https://advisories.mageia.org/MGASA-2018-0393.html
Type: security
Affected Mageia releases: 6
CVE: CVE-2018-12384

Description:
Firefox 60 is now the only supported version of the ESR series and it
brings a completely new browser engine, designed to take full advantage of
the processing power in modern devices. Firefox also now exclusively
supports extensions built using the WebExtension API.

This update brings Firefox 60.2.1 along with the needed updated libraries :
- NSS 3.36.5 (fixes CVE CVE-2018-12384)
- Sqlite 3.22.0
- Hunspell 1.6.2

References:
- https://bugs.mageia.org/show_bug.cgi?id=23511
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...

SRPMS:
- 6/core/firefox-60.2.1-1.mga6
- 6/core/firefox-l10n-60.2.1-1.mga6
- 6/core/nss-3.36.5-1.1.mga6
- 6/core/sqlite3-3.22.0-2.1.mga6
- 6/core/hunspell1.6-1.6.2-1.mga6