SUSE-SU-2021:3446-1
Security update for MozillaFirefox
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.2.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-45 (bsc#1191332) * CVE-2021-38496: Use-after-free in MessageTask * CVE-2021-38497: Validation message could have been overlaid on another origin * CVE-2021-38498: Use-after-free of nsLanguageAtomService object * CVE-2021-32810: Fixed Data race in crossbeam-deque * CVE-2021-38500: Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2 * CVE-2021-38501: Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2 - Fixed crash in FIPS mode (bsc#1190710)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.2 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.3 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 91.2.0-112.74.1 |
Mostrar las 12 entradas de 4 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.2 | MozillaFirefox | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.2 | MozillaFirefox-devel | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.2 | MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.3 | MozillaFirefox | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.3 | MozillaFirefox-devel | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.3 | MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox-devel | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox-translations-common | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox-devel | 91.2.0-112.74.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox-translations-common | 91.2.0-112.74.1 |
Referencias
- https://bugzilla.suse.com/1190710
- https://bugzilla.suse.com/1191332
- https://lists.suse.com/pipermail/sle-security-updates/2021-October/009595.html
- https://www.suse.com/security/cve/CVE-2021-32810/
- https://www.suse.com/security/cve/CVE-2021-38496/
- https://www.suse.com/security/cve/CVE-2021-38497/
- https://www.suse.com/security/cve/CVE-2021-38498/
- https://www.suse.com/security/cve/CVE-2021-38500/