SUSE-SU-2024:4086-1
Security update for MozillaFirefox
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 128.5.0 ESR, fixed various security fixes and other quality improvements, MFSA 2024-64 (bsc#1233695): * CVE-2024-11691: Memory corruption in Apple GPU drivers * CVE-2024-11692: Select list elements could be shown over another site * CVE-2024-11693: Download Protections were bypassed by .library-ms files on Windows * CVE-2024-11694: CSP Bypass and XSS Exposure via Web Compatibility Shims * CVE-2024-11695: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters * CVE-2024-11696: Unhandled Exception in Add-on Signature Verification * CVE-2024-11697: Inproper Keypress Handling in Executable File Confirmation Dialog * CVE-2024-11698: Fullscreen Lock-Up When Modal Dialog Interrupts Transition on macOS * CVE-2024-11699: Memory safety bugs fixed in Firefox 133, Firefox ESR 128.5, and Thunderbird 128.5
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.5 | MozillaFirefox, MozillaFirefox-branding-upstream, MozillaFirefox-devel y 2 más | 128.5.0-150200.152.161.1 |
| openSUSE Leap 15.6 | MozillaFirefox, MozillaFirefox-branding-upstream, MozillaFirefox-devel y 2 más | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.2 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common y 1 más | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.3 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common y 1 más | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.4 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common y 1 más | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.5 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common y 1 más | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.6 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common y 1 más | 128.5.0-150200.152.161.1 |
Mostrar las 30 entradas de 7 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.5 | MozillaFirefox | 128.5.0-150200.152.161.1 |
| openSUSE Leap 15.5 | MozillaFirefox-branding-upstream | 128.5.0-150200.152.161.1 |
| openSUSE Leap 15.5 | MozillaFirefox-devel | 128.5.0-150200.152.161.1 |
| openSUSE Leap 15.5 | MozillaFirefox-translations-common | 128.5.0-150200.152.161.1 |
| openSUSE Leap 15.5 | MozillaFirefox-translations-other | 128.5.0-150200.152.161.1 |
| openSUSE Leap 15.6 | MozillaFirefox | 128.5.0-150200.152.161.1 |
| openSUSE Leap 15.6 | MozillaFirefox-branding-upstream | 128.5.0-150200.152.161.1 |
| openSUSE Leap 15.6 | MozillaFirefox-devel | 128.5.0-150200.152.161.1 |
| openSUSE Leap 15.6 | MozillaFirefox-translations-common | 128.5.0-150200.152.161.1 |
| openSUSE Leap 15.6 | MozillaFirefox-translations-other | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.2 | MozillaFirefox | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.2 | MozillaFirefox-devel | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.2 | MozillaFirefox-translations-common | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.2 | MozillaFirefox-translations-other | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.3 | MozillaFirefox | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.3 | MozillaFirefox-devel | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.3 | MozillaFirefox-translations-common | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.3 | MozillaFirefox-translations-other | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.4 | MozillaFirefox | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.4 | MozillaFirefox-devel | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.4 | MozillaFirefox-translations-common | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.4 | MozillaFirefox-translations-other | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.5 | MozillaFirefox | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.5 | MozillaFirefox-devel | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.5 | MozillaFirefox-translations-common | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.5 | MozillaFirefox-translations-other | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.6 | MozillaFirefox | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.6 | MozillaFirefox-devel | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.6 | MozillaFirefox-translations-common | 128.5.0-150200.152.161.1 |
| SUSE Linux Enterprise 15.6 | MozillaFirefox-translations-other | 128.5.0-150200.152.161.1 |
Referencias
- https://bugzilla.suse.com/1233695
- https://lists.suse.com/pipermail/sle-security-updates/2024-November/019860.html
- https://www.suse.com/security/cve/CVE-2024-11691/
- https://www.suse.com/security/cve/CVE-2024-11692/
- https://www.suse.com/security/cve/CVE-2024-11693/
- https://www.suse.com/security/cve/CVE-2024-11694/
- https://www.suse.com/security/cve/CVE-2024-11695/
- https://www.suse.com/security/cve/CVE-2024-11696/