SUSE-SU-2024:0607-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0607-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2024:0607-1
- Related
- Published
- 2024-02-23T19:01:01Z
- Modified
- 2024-02-23T19:01:01Z
- Summary
- Security update for MozillaFirefox
- Details
-
This update for MozillaFirefox fixes the following issues:
Update to Firefox Extended Support Release 115.8.0 ESR (MFSA 2024-06) (bsc#1220048):
- CVE-2024-1546: Out-of-bounds memory read in networking channels
- CVE-2024-1547: Alert dialog could have been spoofed on another site
- CVE-2024-1548: Fullscreen Notification could have been hidden by select element
- CVE-2024-1549: Custom cursor could obscure the permission dialog
- CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants
- CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in response parts
- CVE-2024-1552: Incorrect code generation on 32-bit ARM devices
CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8
Recommend libfido2-udev on codestreams that exist, in order to try to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)
- References
-
- https://www.suse.com/support/update/announcement/2024/suse-su-20240607-1/
- https://bugzilla.suse.com/1184272
- https://bugzilla.suse.com/1220048
- https://www.suse.com/security/cve/CVE-2024-1546
- https://www.suse.com/security/cve/CVE-2024-1547
- https://www.suse.com/security/cve/CVE-2024-1548
- https://www.suse.com/security/cve/CVE-2024-1549
- https://www.suse.com/security/cve/CVE-2024-1550
- https://www.suse.com/security/cve/CVE-2024-1551
- https://www.suse.com/security/cve/CVE-2024-1552
- https://www.suse.com/security/cve/CVE-2024-1553
Affected packages
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS
SUSE:Linux Enterprise Server 15 SP2-LTSS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS
SUSE:Linux Enterprise Server 15 SP3-LTSS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS
SUSE:Linux Enterprise Server 15 SP4-LTSS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4
SUSE:Enterprise Storage 7.1 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%207.1
openSUSE:Leap 15.5 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=openSUSE%20Leap%2015.5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed115.8.0-150200.152.126.3
Ecosystem specific
{
"binaries": [
{
"MozillaFirefox": "115.8.0-150200.152.126.3",
"MozillaFirefox-translations-common": "115.8.0-150200.152.126.3",
"MozillaFirefox-devel": "115.8.0-150200.152.126.3",
"MozillaFirefox-translations-other": "115.8.0-150200.152.126.3",
"MozillaFirefox-branding-upstream": "115.8.0-150200.152.126.3"
}
]
}