Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2022:4083-1 Important: MozillaFirefox Memory Safety Patch

suse
Calendar Grey November 18, 2022
Scroller Suse
An important update for Google Chrome addresses major concerns, improving data security and resolving multiple exploit vulnerabilities.
An update that fixes 13 vulnerabilities is now available

Summary

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 102.5.0 ESR (MFSA 2022-48, bsc#1205270): - CVE-2022-45403: Service Workers might have learned size of cross-origin media files - CVE-2022-45404: Fullscreen notification bypass - CVE-2022-45405: Use-after-free in InputStream implementation - CVE-2022-45406: Use-after-free of a JavaScript Realm - CVE-2022-45408: Fullscreen notification bypass via windowName - CVE-2022-45409: Use-after-free in Garbage Collection - CVE-2022-45410: ServiceWorker-intercepted requests bypassed SameSite cookie policy - CVE-2022-45411: Cross-Site Tracing was possible via non-standard

Topics%20covered

Topics Covered

security advisory important memory safety Firefox update SUSE Linux Enterprise MozillaFirefox bypass issue

References

#1205270

Cross- CVE-2022-45403 CVE-2022-45404 CVE-2022-45405

CVE-2022-45406 CVE-2022-45408 CVE-2022-45409

CVE-2022-45410 CVE-2022-45411 CVE-2022-45412

CVE-2022-45416 CVE-2022-45418 CVE-2022-45420

CVE-2022-45421

Affected Products:

SUSE CaaS Platform 4.0

SUSE Enterprise Storage 6

SUSE Linux Enterprise High Performance Computing 15-ESPOS

SUSE Linux Enterprise High Performance Computing 15-LTSS

SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS

SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS

SUSE Linux Enterprise Server 15-LTSS

SUSE Linux Enterprise Server 15-SP1-BCL

SUSE Linux Enterprise Server 15-SP1-LTSS

SUSE Linux Enterprise Server for SAP 15

SUSE Linux Enterprise Serve...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:4083-1
Rating: important

Topics%20covered

Topics Covered

security advisory important memory safety Firefox update SUSE Linux Enterprise MozillaFirefox bypass issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.