Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:4247-1 Important Update for MozillaFirefox Security Fixes

suse
Calendar Grey November 28, 2022
Dist Suse Esm H88
The latest update from Mozilla Firefox addresses multiple vulnerabilities. Ensure your system's security and efficiency by installing this essential release.
An update that fixes 13 vulnerabilities is now available

Summary

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 102.5.0 ESR (MFSA 2022-48, bsc#1205270): - CVE-2022-45403: Service Workers might have learned size of cross-origin media files - CVE-2022-45404: Fullscreen notification bypass - CVE-2022-45405: Use-after-free in InputStream implementation - CVE-2022-45406: Use-after-free of a JavaScript Realm - CVE-2022-45408: Fullscreen notification bypass via windowName - CVE-2022-45409: Use-after-free in Garbage Collection - CVE-2022-45410: ServiceWorker-intercepted requests bypassed SameSite cookie policy - CVE-2022-45411: Cross-Site Tracing was possible via non-standard

Topics%20covered

Topics Covered

security advisory suse memory safety mozilla firefox important update cross-origin issue service workers

References

#1205270

Cross- CVE-2022-45403 CVE-2022-45404 CVE-2022-45405

CVE-2022-45406 CVE-2022-45408 CVE-2022-45409

CVE-2022-45410 CVE-2022-45411 CVE-2022-45412

CVE-2022-45416 CVE-2022-45418 CVE-2022-45420

CVE-2022-45421

Affected Products:

SUSE Linux Enterprise Server 12-SP2-BCL

SUSE Linux Enterprise Server 12-SP3-BCL

SUSE Linux Enterprise Server 12-SP4-LTSS

SUSE Linux Enterprise Server 12-SP5

SUSE Linux Enterprise Server for SAP 12-SP4

SUSE Linux Enterprise Server for SAP Applications 12-SP5

SUSE Linux Enterprise Software Development Kit 12-SP5

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 9

https://www.suse.com/security/cve/CVE-2022-45403.html

https://www.suse.com/security/cve/CVE-2022-45404.html

https://www.suse.com/security/...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:4247-1
Rating: important

Topics%20covered

Topics Covered

security advisory suse memory safety mozilla firefox important update cross-origin issue service workers

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here