Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2602-1

Опубликовано: 29 июл. 2022
Источник: suse-cvrf

Описание

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.12.0 ESR (bsc#1201758):

  • CVE-2022-36319: Mouse Position spoofing with CSS transforms
  • CVE-2022-36318: Directory indexes for bundled resources reflected URL parameters

Список пакетов

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
MozillaFirefox-91.12.0-112.124.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-91.12.0-112.124.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
MozillaFirefox-91.12.0-112.124.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-91.12.0-112.124.1
SUSE Linux Enterprise Server 12 SP2-BCL
MozillaFirefox-91.12.0-112.124.1
MozillaFirefox-devel-91.12.0-112.124.1
MozillaFirefox-translations-common-91.12.0-112.124.1
SUSE Linux Enterprise Server 12 SP3-BCL
MozillaFirefox-91.12.0-112.124.1
MozillaFirefox-devel-91.12.0-112.124.1
MozillaFirefox-translations-common-91.12.0-112.124.1
SUSE Linux Enterprise Server 12 SP4-LTSS
MozillaFirefox-91.12.0-112.124.1
MozillaFirefox-devel-91.12.0-112.124.1
MozillaFirefox-translations-common-91.12.0-112.124.1
SUSE Linux Enterprise Server 12 SP5
MozillaFirefox-91.12.0-112.124.1
MozillaFirefox-devel-91.12.0-112.124.1
MozillaFirefox-translations-common-91.12.0-112.124.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
MozillaFirefox-91.12.0-112.124.1
MozillaFirefox-devel-91.12.0-112.124.1
MozillaFirefox-translations-common-91.12.0-112.124.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
MozillaFirefox-91.12.0-112.124.1
MozillaFirefox-devel-91.12.0-112.124.1
MozillaFirefox-translations-common-91.12.0-112.124.1
SUSE Linux Enterprise Software Development Kit 12 SP5
MozillaFirefox-devel-91.12.0-112.124.1
SUSE OpenStack Cloud 9
MozillaFirefox-91.12.0-112.124.1
MozillaFirefox-devel-91.12.0-112.124.1
MozillaFirefox-translations-common-91.12.0-112.124.1
SUSE OpenStack Cloud Crowbar 9
MozillaFirefox-91.12.0-112.124.1
MozillaFirefox-devel-91.12.0-112.124.1
MozillaFirefox-translations-common-91.12.0-112.124.1

Ссылки

Описание

When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.

Затронутые продукты
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.12.0-112.124.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.12.0-112.124.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.12.0-112.124.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.12.0-112.124.1
Ссылки

Описание

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.

Затронутые продукты
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.12.0-112.124.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.12.0-112.124.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:MozillaFirefox-91.12.0-112.124.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-91.12.0-112.124.1
Ссылки
Уязвимость SUSE-SU-2022:2602-1