SUSE-SU-2021:1007-1
SUSE-SU-2021:1007-1 · Security update for MozillaFirefox
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
This update for MozillaFirefox fixes the following issues: - Firefox was updated to 78.9.0 ESR (MFSA 2021-11, bsc#1183942) * CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read * CVE-2021-23982: Internal network hosts could have been probed by a malicious webpage * CVE-2021-23984: Malicious extensions could have spoofed popup information * CVE-2021-23987: Memory safety bugs
Fix available
- Published
- Updated
Stack: system
Affected products and versions
mozilla-nspr SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Affected ranges
- ECOSYSTEM: < 4.25.1-3.17.1
Update to 4.25.1-3.17.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15-ESPOS
- Affected ranges
- ECOSYSTEM: < 78.9.0-3.136.1
Update to 78.9.0-3.136.1
mozillafirefox-branding-sle SUSE:Linux Enterprise High Performance Computing 15-ESPOS
- Affected ranges
- ECOSYSTEM: < 78-4.16.1
Update to 78-4.16.1
mozilla-nspr SUSE:Linux Enterprise High Performance Computing 15-ESPOS
- Affected ranges
- ECOSYSTEM: < 4.25.1-3.17.1
Update to 4.25.1-3.17.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15-LTSS
- Affected ranges
- ECOSYSTEM: < 78.9.0-3.136.1
Update to 78.9.0-3.136.1
mozillafirefox-branding-sle SUSE:Linux Enterprise High Performance Computing 15-LTSS
- Affected ranges
- ECOSYSTEM: < 78-4.16.1
Update to 78-4.16.1
mozilla-nspr SUSE:Linux Enterprise High Performance Computing 15-LTSS
- Affected ranges
- ECOSYSTEM: < 4.25.1-3.17.1
Update to 4.25.1-3.17.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
- Affected ranges
- ECOSYSTEM: < 78.9.0-3.136.1
Update to 78.9.0-3.136.1
mozillafirefox-branding-sle SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
- Affected ranges
- ECOSYSTEM: < 78-4.16.1
Update to 78-4.16.1
mozilla-nspr SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
- Affected ranges
- ECOSYSTEM: < 4.25.1-3.17.1
Update to 4.25.1-3.17.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 78.9.0-3.136.1
Update to 78.9.0-3.136.1
mozillafirefox-branding-sle SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 78-4.16.1
Update to 78-4.16.1
mozilla-nspr SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 4.25.1-3.17.1
Update to 4.25.1-3.17.1
mozillafirefox SUSE:Linux Enterprise Server 15-LTSS
- Affected ranges
- ECOSYSTEM: < 78.9.0-3.136.1
Update to 78.9.0-3.136.1
mozillafirefox-branding-sle SUSE:Linux Enterprise Server 15-LTSS
- Affected ranges
- ECOSYSTEM: < 78-4.16.1
Update to 78-4.16.1
mozilla-nspr SUSE:Linux Enterprise Server 15-LTSS
- Affected ranges
- ECOSYSTEM: < 4.25.1-3.17.1
Update to 4.25.1-3.17.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP1-BCL
- Affected ranges
- ECOSYSTEM: < 78.9.0-3.136.1
Update to 78.9.0-3.136.1
mozillafirefox-branding-sle SUSE:Linux Enterprise Server 15 SP1-BCL
- Affected ranges
- ECOSYSTEM: < 78-4.16.1
Update to 78-4.16.1
mozilla-nspr SUSE:Linux Enterprise Server 15 SP1-BCL
- Affected ranges
- ECOSYSTEM: < 4.25.1-3.17.1
Update to 4.25.1-3.17.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 78.9.0-3.136.1
Update to 78.9.0-3.136.1
mozillafirefox-branding-sle SUSE:Linux Enterprise Server 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 78-4.16.1
Update to 78-4.16.1
mozilla-nspr SUSE:Linux Enterprise Server 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 4.25.1-3.17.1
Update to 4.25.1-3.17.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15
- Affected ranges
- ECOSYSTEM: < 78.9.0-3.136.1
Update to 78.9.0-3.136.1
mozillafirefox-branding-sle SUSE:Linux Enterprise Server for SAP Applications 15
- Affected ranges
- ECOSYSTEM: < 78-4.16.1
Update to 78-4.16.1
Original sources
- https://www.suse.com/support/update/announcement/2021/suse-su-20211007-1/
- https://bugzilla.suse.com/1183942
- https://www.suse.com/security/cve/CVE-2021-23981
- https://www.suse.com/security/cve/CVE-2021-23982
- https://www.suse.com/security/cve/CVE-2021-23984
- https://www.suse.com/security/cve/CVE-2021-23987
- https://osv.dev/vulnerability/SUSE-SU-2021:1007-1