SUSE-SU-2021:0676-1
SUSE-SU-2021:0676-1 · Security update for MozillaFirefox
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.8.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-08 (bsc#1182614) * CVE-2021-23969: Content Security Policy violation report could have contained the destination of a redirect * CVE-2021-23968: Content Security Policy violation report could have contained the destination of a redirect * CVE-2021-23973: MediaError message property could have leaked information about cross-origin resources * CVE-2021-23978: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 * Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. * Buffer overflow in depth pitch calculations for compressed textures
Fix available
- Published
- Updated
Stack: system
Affected products and versions
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
- Affected ranges
- ECOSYSTEM: < 78.8.0-3.133.1
Update to 78.8.0-3.133.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 78.8.0-3.133.1
Update to 78.8.0-3.133.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP1-BCL
- Affected ranges
- ECOSYSTEM: < 78.8.0-3.133.1
Update to 78.8.0-3.133.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 78.8.0-3.133.1
Update to 78.8.0-3.133.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP1
- Affected ranges
- ECOSYSTEM: < 78.8.0-3.133.1
Update to 78.8.0-3.133.1
mozillafirefox SUSE:Manager Proxy 4.0
- Affected ranges
- ECOSYSTEM: < 78.8.0-3.133.1
Update to 78.8.0-3.133.1
mozillafirefox SUSE:Manager Retail Branch Server 4.0
- Affected ranges
- ECOSYSTEM: < 78.8.0-3.133.1
Update to 78.8.0-3.133.1
mozillafirefox SUSE:Manager Server 4.0
- Affected ranges
- ECOSYSTEM: < 78.8.0-3.133.1
Update to 78.8.0-3.133.1
mozillafirefox SUSE:Enterprise Storage 6
- Affected ranges
- ECOSYSTEM: < 78.8.0-3.133.1
Update to 78.8.0-3.133.1
Original sources
- https://www.suse.com/support/update/announcement/2021/suse-su-20210676-1/
- https://bugzilla.suse.com/1181848
- https://bugzilla.suse.com/1182357
- https://bugzilla.suse.com/1182614
- https://www.suse.com/security/cve/CVE-2021-23968
- https://www.suse.com/security/cve/CVE-2021-23969
- https://www.suse.com/security/cve/CVE-2021-23973
- https://www.suse.com/security/cve/CVE-2021-23978
- https://osv.dev/vulnerability/SUSE-SU-2021:0676-1