SUSE-SU-2022:4462-1
SUSE-SU-2022:4462-1 · Security update for MozillaFirefox
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 102.6.0 ESR (bsc#1206242): - CVE-2022-46880: Use-after-free in WebGL - CVE-2022-46872: Arbitrary file read from a compromised content process - CVE-2022-46881: Memory corruption in WebGL - CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions - CVE-2022-46875: Download Protections were bypassed by .atloc and .ftploc files on Mac OS - CVE-2022-46882: Use-after-free in WebGL - CVE-2022-46878: Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6
Fix available
- Published
- Updated
Stack: system
Affected products and versions
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP2-BCL
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP2
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox SUSE:Manager Proxy 4.1
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox SUSE:Manager Retail Branch Server 4.1
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox SUSE:Manager Server 4.1
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox SUSE:Enterprise Storage 7
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox openSUSE:Leap 15.3
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
mozillafirefox openSUSE:Leap 15.4
- Affected ranges
- ECOSYSTEM: < 102.6.0-150200.152.70.1
Update to 102.6.0-150200.152.70.1
Original sources
- https://www.suse.com/support/update/announcement/2022/suse-su-20224462-1/
- https://bugzilla.suse.com/1206242
- https://www.suse.com/security/cve/CVE-2022-46872
- https://www.suse.com/security/cve/CVE-2022-46874
- https://www.suse.com/security/cve/CVE-2022-46875
- https://www.suse.com/security/cve/CVE-2022-46878
- https://www.suse.com/security/cve/CVE-2022-46880
- https://www.suse.com/security/cve/CVE-2022-46881
- https://www.suse.com/security/cve/CVE-2022-46882
- https://osv.dev/vulnerability/SUSE-SU-2022:4462-1