Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 511
Alerts This Week
Warning Icon 1 511

SUSE: 2021:3331-1 Important MozillaFirefox Memory Safety Update

suse
Calendar Grey October 11, 2021
Scroller Suse
The latest SUSE patch tackles various vulnerabilities in MozillaFirefox, aiming to enhance both performance and protection.
An update that fixes 20 vulnerabilities is now available

Summary

This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.2.0 ESR. Firefox Extended Support Release 91.2.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-45 (bsc#1191332) * CVE-2021-38496: Use-after-free in MessageTask * CVE-2021-38497: Validation message could have been overlaid on another origin * CVE-2021-38498: Use-after-free of nsLanguageAtomService object * CVE-2021-32810: Data race in crossbeam-deque j-wgcw) * CVE-2021-38500 (bmo#1725854, bmo#1728321) Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2 * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176) Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2 - Fixed crash in FIPS mode (bsc#1190710)

Topics%20covered

Topics Covered

security advisory security issue SUSE Linux memory safety important update MozillaFirefox

References

#1188891 #1189547 #1190269 #1190274 #1190710

#1191332

Cross- CVE-2021-29980 CVE-2021-29981 CVE-2021-29982

CVE-2021-29983 CVE-2021-29984 CVE-2021-29985

CVE-2021-29986 CVE-2021-29987 CVE-2021-29988

CVE-2021-29989 CVE-2021-29990 CVE-2021-29991

CVE-2021-32810 CVE-2021-38492 CVE-2021-38495

CVE-2021-38496 CVE-2021-38497 CVE-2021-38498

CVE-2021-38500 CVE-2021-38501

CVSS scores:

CVE-2021-29980 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-29984 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-29985 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVE-2021-29986 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-29988 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:3331-1
Rating: important

Topics%20covered

Topics Covered

security advisory security issue SUSE Linux memory safety important update MozillaFirefox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.