SUSE-SU-2022:4462-1
SUSE-SU-2022:4462-1 · Security update for MozillaFirefox
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 102.6.0 ESR (bsc#1206242): - CVE-2022-46880: Use-after-free in WebGL - CVE-2022-46872: Arbitrary file read from a compromised content process - CVE-2022-46881: Memory corruption in WebGL - CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions - CVE-2022-46875: Download Protections were bypassed by .atloc and .ftploc files on Mac OS - CVE-2022-46882: Use-after-free in WebGL - CVE-2022-46878: Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP2-BCL
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP2-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP2
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox SUSE:Manager Proxy 4.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox SUSE:Manager Retail Branch Server 4.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox SUSE:Manager Server 4.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox SUSE:Enterprise Storage 7
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox openSUSE:Leap 15.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
mozillafirefox openSUSE:Leap 15.4
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Actualiza a 102.6.0-150200.152.70.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2022/suse-su-20224462-1/
- https://bugzilla.suse.com/1206242
- https://www.suse.com/security/cve/CVE-2022-46872
- https://www.suse.com/security/cve/CVE-2022-46874
- https://www.suse.com/security/cve/CVE-2022-46875
- https://www.suse.com/security/cve/CVE-2022-46878
- https://www.suse.com/security/cve/CVE-2022-46880
- https://www.suse.com/security/cve/CVE-2022-46881
- https://www.suse.com/security/cve/CVE-2022-46882
- https://osv.dev/vulnerability/SUSE-SU-2022:4462-1