gpp_maybe Security update for mozillafirefox

SUSE-SLE-SAP-12-SP4-2022-1757

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970): - CVE-2022-29914: Fullscreen notification bypass using popups - CVE-2022-29909: Bypassing permission prompt in nested browsing contexts - CVE-2022-29916: Leaking browser history with CSS variables - CVE-2022-29911: iframe Sandbox bypass - CVE-2022-29912: Reader mode bypassed SameSite cookies - CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9

• Release Date
  May 19 2022
• References
  Bugzilla: 1198970
  CVEs: CVE-2022-29912, CVE-2022-29917, CVE-2022-29909, CVE-2022-29911, CVE-2022-29914, CVE-2022-29916
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  91.9.0-112.108.4

  lock rpm

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  91.9.0-112.108.4

  lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  91.9.0-112.108.4

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  MozillaFirefox
  Mozilla Firefox Web Browser

  91.9.0-112.108.4

  lock rpm

  lock src

  MozillaFirefox-devel
  Devel package for Firefox

  91.9.0-112.108.4

  lock rpm

  MozillaFirefox-translations-common
  Common translations for Firefox

  91.9.0-112.108.4

  lock rpm