SUSE-SU-2023:2175-1
Security update for MozillaFirefox
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for MozillaFirefox fixes the following issues: Extended Support Release 102.11.0 ESR (bsc#1211175): - CVE-2023-32205: Browser prompts could have been obscured by popups - CVE-2023-32206: Crash in RLBox Expat driver - CVE-2023-32207: Potential permissions request bypass via clickjacking - CVE-2023-32211: Content process crash due to invalid wasm code - CVE-2023-32212: Potential spoof due to obscured address bar - CVE-2023-32213: Potential memory corruption in FileReader::DoReadData() - CVE-2023-32214: Potential DoS via exposed protocol handlers - CVE-2023-32215: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 15.1 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common und 1 weitere | 102.11.0-150000.150.85.1 |
Alle 4 Einträge aus 1 Quelle zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 15.1 | MozillaFirefox | 102.11.0-150000.150.85.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-devel | 102.11.0-150000.150.85.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-translations-common | 102.11.0-150000.150.85.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-translations-other | 102.11.0-150000.150.85.1 |
Referenzen
- https://bugzilla.suse.com/1211175
- https://lists.suse.com/pipermail/sle-updates/2023-May/029362.html
- https://www.suse.com/security/cve/CVE-2023-32205/
- https://www.suse.com/security/cve/CVE-2023-32206/
- https://www.suse.com/security/cve/CVE-2023-32207/
- https://www.suse.com/security/cve/CVE-2023-32211/
- https://www.suse.com/security/cve/CVE-2023-32212/
- https://www.suse.com/security/cve/CVE-2023-32213/