Security update for MozillaFirefox (moderate)

🗓️ 03 Mar 2022 00:00:00Reported by OpenSuseType

opensuse

opensuse🔗 lists.opensuse.org👁 61 Views

Mozilla Firefox 91.6.0 ESR security updat

Reporter	Title	Published	Views	Family All 1016
vulnersOsv	@alex.garcia/oak (>=0.0.17 <=0.0.19), @apify/better-sqlite3-prebuilds (=7.1.1) +195 more potentially affected by CVE-2021-32803 via tar (>=4.0.1 <=4.4.13)	3 Aug 202119:00	–	vulnersosv
vulnersOsv	@codedungeon/gunner (>=0.38.0 <=0.80.1), @codedungeon/laravel-versions-cli (=0.1.0) +22 more potentially affected by CVE-2021-3807 via ansi-regex (>=4.0.0 <=4.1.0)	20 Sep 202120:20	–	vulnersosv
vulnersOsv	960.css (=1.0.0), @4site/engrid-styles (>=0.2.19 <=0.2.24) +124 more potentially affected by CVE-2021-23343 via path-parse (>=1.0.5 <=1.0.6)	10 Aug 202115:33	–	vulnersosv
vulnersOsv	3d-divider (>=1.0.0 <=1.2.2), 6du (>=0.0.1 <=0.0.5) +790 more potentially affected by CVE-2021-32804 via tar (>=5.0.11 <=5.0.5)	3 Aug 202119:06	–	vulnersosv
vulnersOsv	@adaptable/client (>=0.0.9 <=1.26.0), @adaptable/cloud (>=0.0.1 <=1.28.0) +359 more potentially affected by CVE-2021-32804 via tar (>=6.0.0 <=6.1.0)	3 Aug 202119:06	–	vulnersosv
vulnersOsv	@bdehamer/foo-a (>=0.1.0 <=0.1.1), @platform/cell.cli (=0.2.277) +10 more potentially affected by CVE-2021-3807 via ansi-regex (=6.0.0)	20 Sep 202120:20	–	vulnersosv
vulnersOsv	abt.api.web (=0.0.3) potentially affected by CVE-2021-3807 via ansi-regex (=3.0.0)	20 Sep 202120:20	–	vulnersosv
vulnersOsv	-fides-amor-et-lux (=1.0.0), 20_nogo (>=1.0.0 <=1.1.4) +1976 more potentially affected by CVE-2021-32803 via tar (>=6.0.0 <=6.1.15)	3 Aug 202119:00	–	vulnersosv
vulnersOsv	@1pedro/eslint-config (=0.1.16), @2109-t5/server (>=1.0.0 <=1.0.9) +2560 more potentially affected by CVE-2021-3918 via json-schema (>=0.2.0 <=0.3.0)	19 Nov 202120:16	–	vulnersosv
vulnersOsv	-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0.8.18-p11 (=0.8.18-p12) +26252 more potentially affected by CVE-2021-32804 via tar (>=0.1.12 <=3.1.5)	3 Aug 202119:06	–	vulnersosv

OS	OS Version	Architecture	Package	Package Version	Filename
opensuse	15.3	aarch64	mozillafirefox-91.6.0-152.15.1.aarch64.rpm	91.6.0	MozillaFirefox
opensuse	15.3	aarch64	mozillafirefox-branding-upstream-91.6.0-152.15.1.aarch64.rpm	91.6.0	MozillaFirefox-branding-upstream
opensuse	15.3	aarch64	mozillafirefox-debuginfo-91.6.0-152.15.1.aarch64.rpm	91.6.0	MozillaFirefox-debuginfo
opensuse	15.3	aarch64	mozillafirefox-debugsource-91.6.0-152.15.1.aarch64.rpm	91.6.0	MozillaFirefox-debugsource
opensuse	15.3	aarch64	mozillafirefox-devel-91.6.0-152.15.1.aarch64.rpm	91.6.0	MozillaFirefox-devel
opensuse	15.3	aarch64	mozillafirefox-translations-common-91.6.0-152.15.1.aarch64.rpm	91.6.0	MozillaFirefox-translations-common
opensuse	15.3	aarch64	mozillafirefox-translations-other-91.6.0-152.15.1.aarch64.rpm	91.6.0	MozillaFirefox-translations-other
opensuse	15.3	aarch64	apache2-mod_php7-7.4.6-3.32.1.aarch64.rpm	7.4.6	apache2-mod_php7
opensuse	15.3	aarch64	apache2-mod_php7-debuginfo-7.4.6-3.32.1.aarch64.rpm	7.4.6	apache2-mod_php7-debuginfo
opensuse	15.3	aarch64	nodejs8-8.17.0-10.19.2.aarch64.rpm	8.17.0	nodejs8

03 Mar 2022 00:00Current

9.8High risk

Vulners AI Score9.8

CVSS 35.3

CVSS 3.18.1

EPSS0.15014

mozilla firefox 91.6.0 esr security update vulnerabilities privilege escalation windows extensions permission confirmation image executable iframes script execution cross-origin responses memory safety bugs opensuse leap 15.4 leap 15.3