SUSE-SU-2022:4058-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 102.5.0 ESR MFSA 2022-48, bsc1205270: - CVE-2022-45403: Service Workers might have learned size of cross-origin media files - CVE-2022-45404: Fullscreen notification bypass - CVE-2022-45405:...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the use of memory after it is freed during the processing of JavaScript code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface, which allow attackers to perform spear-phishing attacks.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface. Exploiting these vulnerabilities allows a malicious actor to perform spear-phishing attacks through a series of pop-up calls...

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird, related to information representation errors in the user interface, allow attackers to perform spear-phishing attacks.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow attackers to perform spear-phishing attacks by making a series of pop-up windows and calls to...

November 8, 2022—KB5020000 (Monthly Rollup)

None None...

November 8, 2022—KB5020005 (Security-only update)

None None...

The vulnerability of the Window.print() function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to trigger a service failure.

The vulnerability of the Window.print function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions through a specially created malicious website...

UBUNTU-CVE-2022-42928

Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...

PT-2023-2799 · Mozilla +10 · Thunderbird +11

Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 102.10 Firefox ESR versions prior to 102.10 Description: The issue is related to the Safe Browsing API, where unexpected data could lead to memory corruption and a potentially exploitable crash. This could allow ...

Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort som...

Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort som...

Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort som...

Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort som...

August 9, 2022—KB5016686 (Security-only update)

None None...

October 11, 2022—KB5018479 (Security-only update)

None None...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to insecure management of privileges, allowing a malicious actor to escalate their privileges remotely.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insecure management of privileges. Exploiting these vulnerabilities can allow a malicious actor to enhance their privileges remotely...

UBUNTU-CVE-2022-40962

Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 104 and Firefox ESR 102.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these...

UBUNTU-CVE-2022-40957

Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable crash.This bug only affects Firefox on ARM64 platforms.. This vulnerability affects Firefox ESR 102.3, Thunderbird 102.3, and Firefox 105...

Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Mozilla developers Nika Layzell, Timothy Nikkel, Jeff Muizelaar, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team reporting memory safety bugs present in Firefox 104 and Firefox ESR 102.2...

Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Mozilla developers Nika Layzell, Timothy Nikkel, Jeff Muizelaar, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team reporting memory safety bugs present in Firefox 104 and Firefox ESR 102.2...