Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

SUSE: 2023:4567-2 Essential: MozillaFirefox Severe Memory Vulnerabilities

suse
Calendar Grey December 7, 2017
Dist Suse Esm H88
SUSE has released a security patch for Mozilla Firefox addressing critical vulnerabilities. This update fixes issues related to memory safety and resource timing leaks
An update that fixes three vulnerabilities is now available

Summary

This update for MozillaFirefox ESR 52.5 fixes the following issues: Security issues fixed: - CVE-2017-7826: Memory safety bugs fixed (bsc#1068101). - CVE-2017-7828: Use-after-free of PressShell while restyling layout (bsc#1068101). - CVE-2017-7830: Cross-origin URL information leak through Resource Timing API (bsc#1068101). Mozilla Foundation Security Advisory (MFSA 2017-25): - https://www.mozilla.org/en-US/security/advisories/mfsa2017-25/ Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-MozillaFirefox-13369=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-MozillaFirefox-13369=1

Topics%20covered

Topics Covered

security advisory critical software update SUSE memory safety MozillaFirefox resource leak

References

#1068101

Cross- CVE-2017-7826 CVE-2017-7828 CVE-2017-7830

Affected Products:

SUSE Linux Enterprise Software Development Kit 11-SP4

SUSE Linux Enterprise Server 11-SP4

SUSE Linux Enterprise Server 11-SP3-LTSS

SUSE Linux Enterprise Point of Sale 11-SP3

SUSE Linux Enterprise Debuginfo 11-SP4

SUSE Linux Enterprise Debuginfo 11-SP3

https://www.suse.com/security/cve/CVE-2017-7826.html

https://www.suse.com/security/cve/CVE-2017-7828.html

https://www.suse.com/security/cve/CVE-2017-7830.html

https://bugzilla.suse.com/1068101

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:3233-1
Rating: important

Topics%20covered

Topics Covered

security advisory critical software update SUSE memory safety MozillaFirefox resource leak

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.