[SUSE-SU-2022:0819-1] Security update for MozillaFirefox
Severity
Important
Affected Packages
32
CVEs
5
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
Firefox Extended Support Release 91.7.0 ESR (bsc#1196900):
- CVE-2022-26383: Browser window spoof using fullscreen mode
- CVE-2022-26384: iframe allow-scripts sandbox bypass
- CVE-2022-26387: Time-of-check time-of-use bug when verifying add-on signatures
- CVE-2022-26381: Use-after-free in text reflows
- CVE-2022-26386: Temporary files downloaded to /tmp and accessible by other local users
- ID
- SUSE-SU-2022:0819-1
- Severity
- important
- URL
- https://www.suse.com/support/update/announcement/2022/suse-su-20220819-1/
- Published
-
2022-03-14T10:29:28
(2 years ago) - Modified
-
2022-03-14T10:29:28
(2 years ago) - Rights
- Copyright 2024 SUSE LLC. All rights reserved.
- Other Advisories
-
-
ALAS2-2022-1779
-
ALPINE:CVE-2022-26381
-
ALPINE:CVE-2022-26383
-
ALPINE:CVE-2022-26384
-
ALPINE:CVE-2022-26386
-
ALPINE:CVE-2022-26387
-
ALSA-2022:0818
-
ALSA-2022:0845
-
DSA-5097-1
-
DSA-5106-1
-
ELSA-2022-0818
-
ELSA-2022-0824
-
ELSA-2022-0845
-
ELSA-2022-0850
-
GLSA-202208-08
-
GLSA-202208-14
-
MFSA-2022-10
-
MFSA-2022-11
-
MFSA-2022-12
-
openSUSE-SU-2022:0821-1
-
openSUSE-SU-2022:0906-1
-
RHSA-2022:0818
-
RHSA-2022:0824
-
RHSA-2022:0845
-
RHSA-2022:0850
-
SSA:2022-068-01
-
SUSE-SU-2022:0821-1
-
SUSE-SU-2022:0822-1
-
SUSE-SU-2022:0906-1
-
USN-5321-1
-
USN-5321-2
-
USN-5345-1
-
| Source | # ID | Name | URL |
|---|---|---|---|
| Suse | SUSE ratings |
|
|
| Suse | URL of this CSAF notice |
|
|
| Suse | URL for SUSE-SU-2022:0819-1 |
|
|
| Suse | E-Mail link for SUSE-SU-2022:0819-1 |
|
|
| Bugzilla | SUSE Bug 1196900 |
|
|
| CVE | SUSE CVE CVE-2022-26381 page |
|
|
| CVE | SUSE CVE CVE-2022-26383 page |
|
|
| CVE | SUSE CVE CVE-2022-26384 page |
|
|
| CVE | SUSE CVE CVE-2022-26386 page |
|
|
| CVE | SUSE CVE CVE-2022-26387 page |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-15&sp=1 | suse |
 MozillaFirefox
|
< 91.7.0-150.24.1 | sles-15 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-15 | suse |
MozillaFirefox
|
< 91.7.0-150.24.1 | sles-15 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-15&sp=1 | suse |
MozillaFirefox
|
< 91.7.0-150.24.1 | sles-15 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-15 | suse |
MozillaFirefox
|
< 91.7.0-150.24.1 | sles-15 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-15&sp=1 | suse |
MozillaFirefox
|
< 91.7.0-150.24.1 | sles-15 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-15 | suse |
MozillaFirefox
|
< 91.7.0-150.24.1 | sles-15 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=aarch64&distro=sles-15&sp=1 | suse |
MozillaFirefox
|
< 91.7.0-150.24.1 | sles-15 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=aarch64&distro=sles-15 | suse |
MozillaFirefox
|
< 91.7.0-150.24.1 | sles-15 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-other?arch=x86_64&distro=sles-15&sp=1 | suse |
MozillaFirefox-translations-other
|
< 91.7.0-150.24.1 | sles-15 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-other?arch=x86_64&distro=sles-15 | suse |
MozillaFirefox-translations-other
|
< 91.7.0-150.24.1 | sles-15 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-other?arch=s390x&distro=sles-15&sp=1 | suse |
MozillaFirefox-translations-other
|
< 91.7.0-150.24.1 | sles-15 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-other?arch=s390x&distro=sles-15 | suse |
MozillaFirefox-translations-other
|
< 91.7.0-150.24.1 | sles-15 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-other?arch=ppc64le&distro=sles-15&sp=1 | suse |
MozillaFirefox-translations-other
|
< 91.7.0-150.24.1 | sles-15 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-other?arch=ppc64le&distro=sles-15 | suse |
MozillaFirefox-translations-other
|
< 91.7.0-150.24.1 | sles-15 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-other?arch=aarch64&distro=sles-15&sp=1 | suse |
MozillaFirefox-translations-other
|
< 91.7.0-150.24.1 | sles-15 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-other?arch=aarch64&distro=sles-15 | suse |
MozillaFirefox-translations-other
|
< 91.7.0-150.24.1 | sles-15 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-15&sp=1 | suse |
MozillaFirefox-translations-common
|
< 91.7.0-150.24.1 | sles-15 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-15 | suse |
MozillaFirefox-translations-common
|
< 91.7.0-150.24.1 | sles-15 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=s390x&distro=sles-15&sp=1 | suse |
MozillaFirefox-translations-common
|
< 91.7.0-150.24.1 | sles-15 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=s390x&distro=sles-15 | suse |
MozillaFirefox-translations-common
|
< 91.7.0-150.24.1 | sles-15 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=ppc64le&distro=sles-15&sp=1 | suse |
MozillaFirefox-translations-common
|
< 91.7.0-150.24.1 | sles-15 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=ppc64le&distro=sles-15 | suse |
MozillaFirefox-translations-common
|
< 91.7.0-150.24.1 | sles-15 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=aarch64&distro=sles-15&sp=1 | suse |
MozillaFirefox-translations-common
|
< 91.7.0-150.24.1 | sles-15 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=aarch64&distro=sles-15 | suse |
MozillaFirefox-translations-common
|
< 91.7.0-150.24.1 | sles-15 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-15&sp=1 | suse |
MozillaFirefox-devel
|
< 91.7.0-150.24.1 | sles-15 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-15 | suse |
MozillaFirefox-devel
|
< 91.7.0-150.24.1 | sles-15 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=s390x&distro=sles-15&sp=1 | suse |
MozillaFirefox-devel
|
< 91.7.0-150.24.1 | sles-15 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=s390x&distro=sles-15 | suse |
MozillaFirefox-devel
|
< 91.7.0-150.24.1 | sles-15 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=ppc64le&distro=sles-15&sp=1 | suse |
MozillaFirefox-devel
|
< 91.7.0-150.24.1 | sles-15 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=ppc64le&distro=sles-15 | suse |
MozillaFirefox-devel
|
< 91.7.0-150.24.1 | sles-15 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=aarch64&distro=sles-15&sp=1 | suse |
MozillaFirefox-devel
|
< 91.7.0-150.24.1 | sles-15 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=aarch64&distro=sles-15 | suse |
MozillaFirefox-devel
|
< 91.7.0-150.24.1 | sles-15 | aarch64 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |