Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2022:0115-1 Important: MozillaFirefox Update Fixes Multiple Issues

suse
Calendar Grey January 18, 2022
Dist Suse Esm H88
A crucial SUSE upgrade for MozillaFirefox tackles numerous security vulnerabilities and provides installation commands.
An update that fixes 14 vulnerabilities is now available

Summary

This update for MozillaFirefox fixes the following issues: - CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547). - CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547). - CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547). - CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547). - CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547). - CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547). - CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547). - CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).

Topics%20covered

Topics Covered

security advisory update patch important software mozilla firefox issues

References

#1194547

Cross- CVE-2021-4140 CVE-2022-22737 CVE-2022-22738

CVE-2022-22739 CVE-2022-22740 CVE-2022-22741

CVE-2022-22742 CVE-2022-22743 CVE-2022-22744

CVE-2022-22745 CVE-2022-22746 CVE-2022-22747

CVE-2022-22748 CVE-2022-22751

Affected Products:

SUSE OpenStack Cloud Crowbar 9

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud 8

SUSE Linux Enterprise Software Development Kit 12-SP5

SUSE Linux Enterprise Server for SAP 12-SP4

SUSE Linux Enterprise Server for SAP 12-SP3

SUSE Linux Enterprise Server 12-SP5

SUSE Linux Enterprise Server 12-SP4-LTSS

SUSE Linux Enterprise Server 12-SP3-LTSS

SUSE Linux Enterprise Server 12-SP3-BCL

SUSE Linux Enterprise Server 12...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:0115-1
Rating: important

Topics%20covered

Topics Covered

security advisory update patch important software mozilla firefox issues

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here