openSUSE Security Update : MozillaFirefox / mozilla-nspr / mozilla-nss / etc (openSUSE-2015-718)

Mozilla Firefox was updated to version 42.0, fixing bugs and security issues. Mozilla xulrunner was updated to xulrunner 38.4.0. SeaMonkey was updated to 2.39. New features in Mozilla Firefox : - Private Browsing with Tracking Protection blocks certain Web elements that could be used to record yo...

CVE-2015-7187

CVE-2015-7187 arises from the Add-on SDK in Mozilla Firefox before 42.0 misinterpreting a panel setting script: false, enabling inline script execution in third‑party extensions and potentially allowing remote XSS. The vulnerability affects Firefox’s extension panel rendering and can lead to cros...

CVE-2015-7187

The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via inline JavaScript code that is executed within a third-party extension...