SUSE alert SUSE-SU-2023:2441-1 (firefox)
| From: | sle-security-updates@lists.suse.com | |
| To: | sle-security-updates@lists.suse.com | |
| Subject: | SUSE-SU-2023:2441-1: important: Security update for MozillaFirefox | |
| Date: | Wed, 07 Jun 2023 12:30:18 -0000 | |
| Message-ID: | <168614101859.22755.12181128487210392729@smelt2.suse.de> |
# Security update for MozillaFirefox Announcement ID: SUSE-SU-2023:2441-1 Rating: important References: * #1211922 Cross-References: * CVE-2023-34414 * CVE-2023-34416 CVSS scores: Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Software Development Kit 12 SP5 * SUSE OpenStack Cloud 9 * SUSE OpenStack Cloud Crowbar 9 An update that solves two vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Extended Support Release 102.12.0 ESR (bsc#1211922): * CVE-2023-34414: Click-jacking certificate exceptions through rendering lag * CVE-2023-34416: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 ## Patch Instructions: To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE OpenStack Cloud 9 zypper in -t patch SUSE-OpenStack-Cloud-9-2023-2441=1 * SUSE OpenStack Cloud Crowbar 9 zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2023-2441=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 zypper in -t patch SUSE-SLE-SAP-12-SP4-2023-2441=1 * SUSE Linux Enterprise Software Development Kit 12 SP5 zypper in -t patch SUSE-SLE-SDK-12-SP5-2023-2441=1 * SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2023-2441=1 * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 zypper in -t patch SUSE-SLE-SERVER-12-SP4-ESPOS-2023-2441=1 * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2023-2441=1 * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-2441=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-2441=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-2441=1 ## Package List: * SUSE OpenStack Cloud 9 (x86_64) * MozillaFirefox-translations-common-102.12.0-112.162.1 * MozillaFirefox-debuginfo-102.12.0-112.162.1 * MozillaFirefox-devel-102.12.0-112.162.1 * MozillaFirefox-102.12.0-112.162.1 * MozillaFirefox-debugsource-102.12.0-112.162.1 * SUSE OpenStack Cloud Crowbar 9 (x86_64) * MozillaFirefox-translations-common-102.12.0-112.162.1 * MozillaFirefox-debuginfo-102.12.0-112.162.1 * MozillaFirefox-devel-102.12.0-112.162.1 * MozillaFirefox-102.12.0-112.162.1 * MozillaFirefox-debugsource-102.12.0-112.162.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 (ppc64le x86_64) * MozillaFirefox-translations-common-102.12.0-112.162.1 * MozillaFirefox-debuginfo-102.12.0-112.162.1 * MozillaFirefox-devel-102.12.0-112.162.1 * MozillaFirefox-102.12.0-112.162.1 * MozillaFirefox-debugsource-102.12.0-112.162.1 * SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-102.12.0-112.162.1 * MozillaFirefox-devel-102.12.0-112.162.1 * MozillaFirefox-debugsource-102.12.0-112.162.1 * SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 (x86_64) * MozillaFirefox-translations-common-102.12.0-112.162.1 * MozillaFirefox-debuginfo-102.12.0-112.162.1 * MozillaFirefox-devel-102.12.0-112.162.1 * MozillaFirefox-102.12.0-112.162.1 * MozillaFirefox-debugsource-102.12.0-112.162.1 * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (aarch64 x86_64) * MozillaFirefox-translations-common-102.12.0-112.162.1 * MozillaFirefox-debuginfo-102.12.0-112.162.1 * MozillaFirefox-devel-102.12.0-112.162.1 * MozillaFirefox-102.12.0-112.162.1 * MozillaFirefox-debugsource-102.12.0-112.162.1 * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-common-102.12.0-112.162.1 * MozillaFirefox-debuginfo-102.12.0-112.162.1 * MozillaFirefox-devel-102.12.0-112.162.1 * MozillaFirefox-102.12.0-112.162.1 * MozillaFirefox-debugsource-102.12.0-112.162.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64) * MozillaFirefox-translations-common-102.12.0-112.162.1 * MozillaFirefox-debuginfo-102.12.0-112.162.1 * MozillaFirefox-devel-102.12.0-112.162.1 * MozillaFirefox-102.12.0-112.162.1 * MozillaFirefox-debugsource-102.12.0-112.162.1 * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-common-102.12.0-112.162.1 * MozillaFirefox-debuginfo-102.12.0-112.162.1 * MozillaFirefox-devel-102.12.0-112.162.1 * MozillaFirefox-102.12.0-112.162.1 * MozillaFirefox-debugsource-102.12.0-112.162.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64) * MozillaFirefox-translations-common-102.12.0-112.162.1 * MozillaFirefox-debuginfo-102.12.0-112.162.1 * MozillaFirefox-devel-102.12.0-112.162.1 * MozillaFirefox-102.12.0-112.162.1 * MozillaFirefox-debugsource-102.12.0-112.162.1 ## References: * https://www.suse.com/security/cve/CVE-2023-34414.html * https://www.suse.com/security/cve/CVE-2023-34416.html * https://bugzilla.suse.com/show_bug.cgi?id=1211922