[SUSE-SU-2022:1757-1] Security update for MozillaFirefox
Severity
Important
Affected Packages
39
CVEs
6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970):
- CVE-2022-29914: Fullscreen notification bypass using popups
- CVE-2022-29909: Bypassing permission prompt in nested browsing contexts
- CVE-2022-29916: Leaking browser history with CSS variables
- CVE-2022-29911: iframe Sandbox bypass
- CVE-2022-29912: Reader mode bypassed SameSite cookies
- CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
- ID
- SUSE-SU-2022:1757-1
- Severity
- important
- URL
- https://www.suse.com/support/update/announcement/2022/suse-su-20221757-1/
- Published
-
2022-05-19T15:30:34
(2 years ago) - Modified
-
2022-05-19T15:30:34
(2 years ago) - Rights
- Copyright 2024 SUSE LLC. All rights reserved.
- Other Advisories
-
-
ALAS2-2022-1828
-
ALPINE:CVE-2022-29909
-
ALPINE:CVE-2022-29911
-
ALPINE:CVE-2022-29912
-
ALPINE:CVE-2022-29914
-
ALPINE:CVE-2022-29916
-
ALPINE:CVE-2022-29917
-
ALSA-2022:1705
-
ALSA-2022:1730
-
DSA-5129-1
-
DSA-5141-1
-
ELSA-2022-1703
-
ELSA-2022-1705
-
ELSA-2022-1725
-
ELSA-2022-1730
-
ELSA-2022-4589
-
ELSA-2022-4590
-
GLSA-202208-08
-
GLSA-202208-14
-
MFSA-2022-16
-
MFSA-2022-17
-
MFSA-2022-18
-
RHSA-2022:1703
-
RHSA-2022:1705
-
RHSA-2022:1725
-
RHSA-2022:1730
-
RHSA-2022:4589
-
RHSA-2022:4590
-
RLSA-2022:1705
-
RLSA-2022:1730
-
SUSE-SU-2022:1719-1
-
SUSE-SU-2022:1731-1
-
SUSE-SU-2022:1748-1
-
USN-5411-1
-
USN-5435-1
-
| Source | # ID | Name | URL |
|---|---|---|---|
| Suse | SUSE ratings |
|
|
| Suse | URL of this CSAF notice |
|
|
| Suse | URL for SUSE-SU-2022:1757-1 |
|
|
| Suse | E-Mail link for SUSE-SU-2022:1757-1 |
|
|
| Bugzilla | SUSE Bug 1198970 |
|
|
| CVE | SUSE CVE CVE-2022-29909 page |
|
|
| CVE | SUSE CVE CVE-2022-29911 page |
|
|
| CVE | SUSE CVE CVE-2022-29912 page |
|
|
| CVE | SUSE CVE CVE-2022-29914 page |
|
|
| CVE | SUSE CVE CVE-2022-29916 page |
|
|
| CVE | SUSE CVE CVE-2022-29917 page |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12&sp=5 | suse |
 MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12&sp=4 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12&sp=3 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12&sp=2 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-12&sp=5 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-12&sp=4 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-12&sp=3 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-12&sp=5 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-12&sp=4 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-12&sp=3 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=aarch64&distro=sles-12&sp=5 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=aarch64&distro=sles-12&sp=4 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox?arch=aarch64&distro=sles-12&sp=3 | suse |
MozillaFirefox
|
< 91.9.0-112.108.4 | sles-12 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-12&sp=5 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-12&sp=4 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-12&sp=3 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-12&sp=2 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=s390x&distro=sles-12&sp=5 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=s390x&distro=sles-12&sp=4 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=s390x&distro=sles-12&sp=3 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=ppc64le&distro=sles-12&sp=5 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=ppc64le&distro=sles-12&sp=4 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=ppc64le&distro=sles-12&sp=3 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=aarch64&distro=sles-12&sp=5 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=aarch64&distro=sles-12&sp=4 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-translations-common?arch=aarch64&distro=sles-12&sp=3 | suse |
MozillaFirefox-translations-common
|
< 91.9.0-112.108.4 | sles-12 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-12&sp=5 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-12&sp=4 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-12&sp=3 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-12&sp=2 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | x86_64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=s390x&distro=sles-12&sp=5 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=s390x&distro=sles-12&sp=4 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=s390x&distro=sles-12&sp=3 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | s390x | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=ppc64le&distro=sles-12&sp=5 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=ppc64le&distro=sles-12&sp=4 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=ppc64le&distro=sles-12&sp=3 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | ppc64le | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=aarch64&distro=sles-12&sp=5 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=aarch64&distro=sles-12&sp=4 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | aarch64 | |
| Affected | pkg:rpm/suse/MozillaFirefox-devel?arch=aarch64&distro=sles-12&sp=3 | suse |
MozillaFirefox-devel
|
< 91.9.0-112.108.4 | sles-12 | aarch64 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |