SUSE-SU-2026:21541-1
Security update for MozillaFirefox
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.10.1 ESR. - MFSA 2026-36 (bsc#1263110) * CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component. * CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. * CVE-2026-7322: Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1 * CVE-2026-7323: Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 16.0 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common y 1 más | 140.10.1-160000.1.1 |
Mostrar las 4 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 16.0 | MozillaFirefox | 140.10.1-160000.1.1 |
| SUSE Linux Enterprise 16.0 | MozillaFirefox-devel | 140.10.1-160000.1.1 |
| SUSE Linux Enterprise 16.0 | MozillaFirefox-translations-common | 140.10.1-160000.1.1 |
| SUSE Linux Enterprise 16.0 | MozillaFirefox-translations-other | 140.10.1-160000.1.1 |
Referencias
- https://bugzilla.suse.com/1263110
- https://lists.suse.com/pipermail/sle-security-updates/2026-May/025977.html
- https://www.suse.com/security/cve/CVE-2026-7320/
- https://www.suse.com/security/cve/CVE-2026-7321/
- https://www.suse.com/security/cve/CVE-2026-7322/
- https://www.suse.com/security/cve/CVE-2026-7323/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-202621541-1/