SUSE-SU-2022:2596-1

Опубликовано: 29 июл. 2022

Источник: suse-cvrf

Описание

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.12.0 ESR (bsc#1201758):

CVE-2022-36319: Mouse Position spoofing with CSS transforms
CVE-2022-36318: Directory indexes for bundled resources reflected URL parameters

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

MozillaFirefox-91.12.0-150000.150.50.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

MozillaFirefox-91.12.0-150000.150.50.1

SUSE Enterprise Storage 6

MozillaFirefox-91.12.0-150000.150.50.1

MozillaFirefox-devel-91.12.0-150000.150.50.1

MozillaFirefox-translations-common-91.12.0-150000.150.50.1

MozillaFirefox-translations-other-91.12.0-150000.150.50.1

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

MozillaFirefox-91.12.0-150000.150.50.1

MozillaFirefox-devel-91.12.0-150000.150.50.1

MozillaFirefox-translations-common-91.12.0-150000.150.50.1

MozillaFirefox-translations-other-91.12.0-150000.150.50.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

MozillaFirefox-91.12.0-150000.150.50.1

MozillaFirefox-devel-91.12.0-150000.150.50.1

MozillaFirefox-translations-common-91.12.0-150000.150.50.1

MozillaFirefox-translations-other-91.12.0-150000.150.50.1

SUSE Linux Enterprise High Performance Computing 15-ESPOS

MozillaFirefox-91.12.0-150000.150.50.1

MozillaFirefox-devel-91.12.0-150000.150.50.1

MozillaFirefox-translations-common-91.12.0-150000.150.50.1

MozillaFirefox-translations-other-91.12.0-150000.150.50.1

SUSE Linux Enterprise High Performance Computing 15-LTSS

MozillaFirefox-91.12.0-150000.150.50.1

MozillaFirefox-devel-91.12.0-150000.150.50.1

MozillaFirefox-translations-common-91.12.0-150000.150.50.1

MozillaFirefox-translations-other-91.12.0-150000.150.50.1

SUSE Linux Enterprise Server 15 SP1-BCL

MozillaFirefox-91.12.0-150000.150.50.1

MozillaFirefox-devel-91.12.0-150000.150.50.1

MozillaFirefox-translations-common-91.12.0-150000.150.50.1

MozillaFirefox-translations-other-91.12.0-150000.150.50.1

SUSE Linux Enterprise Server 15 SP1-LTSS

MozillaFirefox-91.12.0-150000.150.50.1

MozillaFirefox-devel-91.12.0-150000.150.50.1

MozillaFirefox-translations-common-91.12.0-150000.150.50.1

MozillaFirefox-translations-other-91.12.0-150000.150.50.1

SUSE Linux Enterprise Server 15-LTSS

MozillaFirefox-91.12.0-150000.150.50.1

MozillaFirefox-devel-91.12.0-150000.150.50.1

MozillaFirefox-translations-common-91.12.0-150000.150.50.1

MozillaFirefox-translations-other-91.12.0-150000.150.50.1

SUSE Linux Enterprise Server for SAP Applications 15

MozillaFirefox-91.12.0-150000.150.50.1

MozillaFirefox-devel-91.12.0-150000.150.50.1

MozillaFirefox-translations-common-91.12.0-150000.150.50.1

MozillaFirefox-translations-other-91.12.0-150000.150.50.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

MozillaFirefox-91.12.0-150000.150.50.1

MozillaFirefox-devel-91.12.0-150000.150.50.1

MozillaFirefox-translations-common-91.12.0-150000.150.50.1

MozillaFirefox-translations-other-91.12.0-150000.150.50.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20222596-1/
Link for SUSE-SU-2022:2596-1
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011719.html
E-Mail link for SUSE-SU-2022:2596-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1201758
SUSE Bug 1201758
https://www.suse.com/security/cve/CVE-2022-36318/
SUSE CVE CVE-2022-36318 page
https://www.suse.com/security/cve/CVE-2022-36319/
SUSE CVE CVE-2022-36319 page

Описание

When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.12.0-150000.150.50.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.12.0-150000.150.50.1

SUSE Enterprise Storage 6:MozillaFirefox-91.12.0-150000.150.50.1

SUSE Enterprise Storage 6:MozillaFirefox-devel-91.12.0-150000.150.50.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-36318.html
CVE-2022-36318

Описание

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.12.0-150000.150.50.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.12.0-150000.150.50.1

SUSE Enterprise Storage 6:MozillaFirefox-91.12.0-150000.150.50.1

SUSE Enterprise Storage 6:MozillaFirefox-devel-91.12.0-150000.150.50.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-36319.html
CVE-2022-36319

SUSE-SU-2022:2596-1

Описание

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

SUSE Enterprise Storage 6

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise High Performance Computing 15-ESPOS

SUSE Linux Enterprise High Performance Computing 15-LTSS

SUSE Linux Enterprise Server 15 SP1-BCL

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server 15-LTSS

SUSE Linux Enterprise Server for SAP Applications 15

SUSE Linux Enterprise Server for SAP Applications 15 SP1

Ссылки

Уязвимость: CVE-2022-36318

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2022-36319

Описание

Затронутые продукты

Ссылки