SUSE-SU-2021:3446-1
Security update for MozillaFirefox
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.2.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-45 (bsc#1191332) * CVE-2021-38496: Use-after-free in MessageTask * CVE-2021-38497: Validation message could have been overlaid on another origin * CVE-2021-38498: Use-after-free of nsLanguageAtomService object * CVE-2021-32810: Fixed Data race in crossbeam-deque * CVE-2021-38500: Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2 * CVE-2021-38501: Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2 - Fixed crash in FIPS mode (bsc#1190710)
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12.2 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.3 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 91.2.0-112.74.1 |
Alle 12 Einträge aus 4 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12.2 | MozillaFirefox | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.2 | MozillaFirefox-devel | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.2 | MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.3 | MozillaFirefox | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.3 | MozillaFirefox-devel | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.3 | MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox-devel | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox-devel | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox-translations-common | 91.2.0-112.74.1 |
Referenzen
- https://bugzilla.suse.com/1190710
- https://bugzilla.suse.com/1191332
- https://lists.suse.com/pipermail/sle-security-updates/2021-October/009595.html
- https://www.suse.com/security/cve/CVE-2021-32810/
- https://www.suse.com/security/cve/CVE-2021-38496/
- https://www.suse.com/security/cve/CVE-2021-38497/
- https://www.suse.com/security/cve/CVE-2021-38498/
- https://www.suse.com/security/cve/CVE-2021-38500/