Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

SUSE Linux 11-SP4: 2022:14896-1 Important: MozillaFirefox Update

suse
Calendar Grey February 24, 2022
Scroller Suse
Crucial SUSE Security Upgrade for MozillaFirefox tackles eight security flaws and offers vital installation guidelines.
An update that fixes 8 vulnerabilities is now available

Summary

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have bypassed permission confirmation during update - CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable - CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements - CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types - CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages - CVE-2022-22763: Script Execution during invalid object state

Topics%20covered

Topics Covered

security advisory privilege escalation patch important SUSE memory safety MozillaFirefox

References

#1195230 #1195682

Cross- CVE-2022-22753 CVE-2022-22754 CVE-2022-22756

CVE-2022-22759 CVE-2022-22760 CVE-2022-22761

CVE-2022-22763 CVE-2022-22764

Affected Products:

SUSE Linux Enterprise Debuginfo 11-SP4

SUSE Linux Enterprise Server 11-SP4-LTSS

https://www.suse.com/security/cve/CVE-2022-22753.html

https://www.suse.com/security/cve/CVE-2022-22754.html

https://www.suse.com/security/cve/CVE-2022-22756.html

https://www.suse.com/security/cve/CVE-2022-22759.html

https://www.suse.com/security/cve/CVE-2022-22760.html

https://www.suse.com/security/cve/CVE-2022-22761.html

https://www.suse.com/security/cve/CVE-2022-22763.html

https://www.suse.com/security/cve/CVE-2022-22764.html

https://bugzilla.suse.com/1195230

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:14896-1
Rating: important

Topics%20covered

Topics Covered

security advisory privilege escalation patch important SUSE memory safety MozillaFirefox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.