SUSE-SU-2021:0999-1

Details

Description of the patch:

This update for MozillaFirefox fixes the following issues:

Firefox was updated to 78.9.0 ESR (MFSA 2021-11, bsc#1183942)
- CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read
- CVE-2021-23982: Internal network hosts could have been probed by a malicious webpage
- CVE-2021-23984: Malicious extensions could have spoofed popup information
- CVE-2021-23987: Memory safety bugs

Affected Packages

MozillaFirefox

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4-LTSS

Fixed in:

78.9.0-112.54.1

MozillaFirefox-devel

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4-LTSS

Fixed in:

78.9.0-112.54.1

MozillaFirefox-translations-common

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4-LTSS

Fixed in:

78.9.0-112.54.1

References

ADVISORY

https://bugzilla.suse.com/1183942

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2021-March/008573.html

ADVISORY

https://www.suse.com/security/cve/CVE-2021-23981/

ADVISORY

https://www.suse.com/security/cve/CVE-2021-23982/

ADVISORY

https://www.suse.com/security/cve/CVE-2021-23984/

ADVISORY

https://www.suse.com/security/cve/CVE-2021-23987/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2021/suse-su-20210999-1/