Описание
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
Firefox Extended Support Release 78.12.0 ESR
- Fixed: Various stability, functionality, and security fixes
MFSA 2021-29 (bsc#1188275)
- CVE-2021-29970: Use-after-free in accessibility features of a document
- CVE-2021-30547: Out of bounds write in ANGLE
- CVE-2021-29976: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
Список пакетов
SUSE Linux Enterprise Server 11 SP4-LTSS
Ссылки
- Link for SUSE-SU-2021:14766-1
- E-Mail link for SUSE-SU-2021:14766-1
- SUSE Security Ratings
- SUSE Bug 1188275
- SUSE CVE CVE-2021-29970 page
- SUSE CVE CVE-2021-29976 page
- SUSE CVE CVE-2021-30547 page
Описание
A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered when accessibility was enabled.*. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90.
Затронутые продукты
Ссылки
- CVE-2021-29970
- SUSE Bug 1188275
Описание
Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90.
Затронутые продукты
Ссылки
- CVE-2021-29976
- SUSE Bug 1188275
Описание
Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2021-30547
- SUSE Bug 1187141
- SUSE Bug 1188275