p PatchFirst

SUSE-SU-2022:3441-1

SUSE-SU-2022:3441-1 · Security update for MozillaFirefox

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated from 102.2.0esr to 102.3.0esr (bsc#1203477): - CVE-2022-40959: Fixed bypassing FeaturePolicy restrictions on transient pages. - CVE-2022-40960: Fixed data-race when parsing non-UTF-8 URLs in threads. - CVE-2022-40958: Fixed bypassing secure context restriction for cookies with __Host and __Secure prefix. - CVE-2022-40956: Fixed content-security-policy base-uri bypass. - CVE-2022-40957: Fixed incoherent instruction cache when building WASM on ARM64. - CVE-2022-40962: Fixed memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • mozillafirefox SUSE:Linux Enterprise High Performance Computing 15-ESPOS

    Affected ranges
    • ECOSYSTEM: < 102.3.0-150000.150.59.2

    Update to 102.3.0-150000.150.59.2

  • mozillafirefox SUSE:Linux Enterprise High Performance Computing 15-LTSS

    Affected ranges
    • ECOSYSTEM: < 102.3.0-150000.150.59.2

    Update to 102.3.0-150000.150.59.2

  • mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS

    Affected ranges
    • ECOSYSTEM: < 102.3.0-150000.150.59.2

    Update to 102.3.0-150000.150.59.2

  • mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS

    Affected ranges
    • ECOSYSTEM: < 102.3.0-150000.150.59.2

    Update to 102.3.0-150000.150.59.2

  • mozillafirefox SUSE:Linux Enterprise Server 15-LTSS

    Affected ranges
    • ECOSYSTEM: < 102.3.0-150000.150.59.2

    Update to 102.3.0-150000.150.59.2

  • mozillafirefox SUSE:Linux Enterprise Server 15 SP1-BCL

    Affected ranges
    • ECOSYSTEM: < 102.3.0-150000.150.59.2

    Update to 102.3.0-150000.150.59.2

  • mozillafirefox SUSE:Linux Enterprise Server 15 SP1-LTSS

    Affected ranges
    • ECOSYSTEM: < 102.3.0-150000.150.59.2

    Update to 102.3.0-150000.150.59.2

  • mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15

    Affected ranges
    • ECOSYSTEM: < 102.3.0-150000.150.59.2

    Update to 102.3.0-150000.150.59.2

  • mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP1

    Affected ranges
    • ECOSYSTEM: < 102.3.0-150000.150.59.2

    Update to 102.3.0-150000.150.59.2

  • mozillafirefox SUSE:Enterprise Storage 6

    Affected ranges
    • ECOSYSTEM: < 102.3.0-150000.150.59.2

    Update to 102.3.0-150000.150.59.2

Original sources

Check your server →