Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2021:3745-1 Important: MozillaFirefox 8 Issues Fixed

suse
Calendar Grey November 19, 2021
Scroller Suse
A significant update for Google Chrome has just been released, targeting 10 discovered security vulnerabilities and enhancements.
An update that fixes 8 vulnerabilities is now available

Summary

This update for MozillaFirefox fixes the following issues: MozillaFirefox was updated to Extended Support Release 91.3.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-49 (bsc#1192250) * CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets * CVE-2021-38504: Use-after-free in file picker dialog * CVE-2021-38505: Windows 10 Cloud Clipboard may have recorded sensitive user data * CVE-2021-38506: Firefox could be coaxed into going into fullscreen mode without notification or warning * CVE-2021-38507: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports * CVE-2021-38508: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing

Topics%20covered

Topics Covered

security advisory software update security fix important SUSE MozillaFirefox 8 issues

References

#1192250

Cross- CVE-2021-38503 CVE-2021-38504 CVE-2021-38505

CVE-2021-38506 CVE-2021-38507 CVE-2021-38508

CVE-2021-38509 CVE-2021-38510

Affected Products:

SUSE Linux Enterprise Module for Desktop Applications 15-SP3

SUSE Linux Enterprise Module for Desktop Applications 15-SP2

https://www.suse.com/security/cve/CVE-2021-38503.html

https://www.suse.com/security/cve/CVE-2021-38504.html

https://www.suse.com/security/cve/CVE-2021-38505.html

https://www.suse.com/security/cve/CVE-2021-38506.html

https://www.suse.com/security/cve/CVE-2021-38507.html

https://www.suse.com/security/cve/CVE-2021-38508.html

https://www.suse.com/security/cve/CVE-2021-38509.html

https://www.suse.com/security/cve/CVE-2021-38510.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:3745-1
Rating: important

Topics%20covered

Topics Covered

security advisory software update security fix important SUSE MozillaFirefox 8 issues

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.