Security update for MozillaFirefox SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:14859-1 Final 1 1 2021-12-10T16:30:46Z current 2021-12-10T16:30:46Z 2021-12-10T16:30:46Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for MozillaFirefox This update for MozillaFirefox fixes the following issues: Update to Extended Support Release 91.4.0 (bsc#1193485): - CVE-2021-43536: URL leakage when navigating while executing asynchronous function - CVE-2021-43537: Heap buffer overflow when using structured clone - CVE-2021-43538: Missing fullscreen and pointer lock notification when requesting both - CVE-2021-43539: GC rooting failure when calling wasm instance methods - CVE-2021-43541: External protocol handler parameters were unescaped - CVE-2021-43542: XMLHttpRequest error codes could have leaked the existence of an external protocol handler - CVE-2021-43543: Bypass of CSP sandbox directive when embedding - CVE-2021-43545: Denial of Service when using the Location API in a loop - CVE-2021-43546: Cursor spoofing could overlay user interface when native cursor is zoomed - Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4 - Removed x-scheme-handler/ftp from MozillaFirefox.desktop (bsc#1193321) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slessp4-MozillaFirefox-14859 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-202114859-1/ Link for SUSE-SU-2021:14859-1 https://lists.suse.com/pipermail/sle-security-updates/2021-December/009881.html E-Mail link for SUSE-SU-2021:14859-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1193321 SUSE Bug 1193321 https://bugzilla.suse.com/1193485 SUSE Bug 1193485 https://www.suse.com/security/cve/CVE-2021-43536/ SUSE CVE CVE-2021-43536 page https://www.suse.com/security/cve/CVE-2021-43537/ SUSE CVE CVE-2021-43537 page https://www.suse.com/security/cve/CVE-2021-43538/ SUSE CVE CVE-2021-43538 page https://www.suse.com/security/cve/CVE-2021-43539/ SUSE CVE CVE-2021-43539 page https://www.suse.com/security/cve/CVE-2021-43541/ SUSE CVE CVE-2021-43541 page https://www.suse.com/security/cve/CVE-2021-43542/ SUSE CVE CVE-2021-43542 page https://www.suse.com/security/cve/CVE-2021-43543/ SUSE CVE CVE-2021-43543 page https://www.suse.com/security/cve/CVE-2021-43545/ SUSE CVE CVE-2021-43545 page https://www.suse.com/security/cve/CVE-2021-43546/ SUSE CVE CVE-2021-43546 page SUSE Linux Enterprise Server 11 SP4-LTSS MozillaFirefox-91.4.0-78.154.1 MozillaFirefox-translations-common-91.4.0-78.154.1 MozillaFirefox-translations-other-91.4.0-78.154.1 MozillaFirefox-91.4.0-78.154.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS MozillaFirefox-translations-common-91.4.0-78.154.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS MozillaFirefox-translations-other-91.4.0-78.154.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43536 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-common-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-other-91.4.0-78.154.1 important 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114859-1/ https://www.suse.com/security/cve/CVE-2021-43536.html CVE-2021-43536 https://bugzilla.suse.com/1193485 SUSE Bug 1193485 An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43537 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-common-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-other-91.4.0-78.154.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114859-1/ https://www.suse.com/security/cve/CVE-2021-43537.html CVE-2021-43537 https://bugzilla.suse.com/1193485 SUSE Bug 1193485 By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43538 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-common-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-other-91.4.0-78.154.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114859-1/ https://www.suse.com/security/cve/CVE-2021-43538.html CVE-2021-43538 https://bugzilla.suse.com/1193485 SUSE Bug 1193485 Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43539 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-common-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-other-91.4.0-78.154.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114859-1/ https://www.suse.com/security/cve/CVE-2021-43539.html CVE-2021-43539 https://bugzilla.suse.com/1193485 SUSE Bug 1193485 When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43541 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-common-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-other-91.4.0-78.154.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114859-1/ https://www.suse.com/security/cve/CVE-2021-43541.html CVE-2021-43541 https://bugzilla.suse.com/1193485 SUSE Bug 1193485 Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43542 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-common-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-other-91.4.0-78.154.1 important 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114859-1/ https://www.suse.com/security/cve/CVE-2021-43542.html CVE-2021-43542 https://bugzilla.suse.com/1193485 SUSE Bug 1193485 Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43543 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-common-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-other-91.4.0-78.154.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114859-1/ https://www.suse.com/security/cve/CVE-2021-43543.html CVE-2021-43543 https://bugzilla.suse.com/1193485 SUSE Bug 1193485 Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43545 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-common-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-other-91.4.0-78.154.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114859-1/ https://www.suse.com/security/cve/CVE-2021-43545.html CVE-2021-43545 https://bugzilla.suse.com/1193485 SUSE Bug 1193485 It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43546 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-common-91.4.0-78.154.1 SUSE Linux Enterprise Server 11 SP4-LTSS:MozillaFirefox-translations-other-91.4.0-78.154.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114859-1/ https://www.suse.com/security/cve/CVE-2021-43546.html CVE-2021-43546 https://bugzilla.suse.com/1193485 SUSE Bug 1193485