Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

SUSE: 2022:4810-3 Critical MozillaFirefox Vulnerability Patch

suse
Calendar Grey November 17, 2021
Scroller Suse
SUSE has released a vital enhancement for MozillaFirefox, tackling significant vulnerabilities identified across multiple products.
An update that fixes 8 vulnerabilities is now available

Summary

This update for MozillaFirefox fixes the following issues: MozillaFirefox was updated to Extended Support Release 91.3.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-49 (bsc#1192250) * CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets * CVE-2021-38504: Use-after-free in file picker dialog * CVE-2021-38505: Windows 10 Cloud Clipboard may have recorded sensitive user data * CVE-2021-38506: Firefox could be coaxed into going into fullscreen mode without notification or warning * CVE-2021-38507: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports * CVE-2021-38508: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing

Topics%20covered

Topics Covered

security advisory security issue software update important web browser MozillaFirefox SUSE OpenStack

References

#1192250

Cross- CVE-2021-38503 CVE-2021-38504 CVE-2021-38505

CVE-2021-38506 CVE-2021-38507 CVE-2021-38508

CVE-2021-38509 CVE-2021-38510

Affected Products:

SUSE OpenStack Cloud Crowbar 9

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud 8

SUSE Linux Enterprise Software Development Kit 12-SP5

SUSE Linux Enterprise Server for SAP 12-SP4

SUSE Linux Enterprise Server for SAP 12-SP3

SUSE Linux Enterprise Server 12-SP5

SUSE Linux Enterprise Server 12-SP4-LTSS

SUSE Linux Enterprise Server 12-SP3-LTSS

SUSE Linux Enterprise Server 12-SP3-BCL

SUSE Linux Enterprise Server 12-SP2-BCL

HPE Helion Openstack 8

https://www.suse.com/security/cve/CVE-2021-38503.html

https://www.suse.c...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:3721-1
Rating: important

Topics%20covered

Topics Covered

security advisory security issue software update important web browser MozillaFirefox SUSE OpenStack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.