SUSE-SU-2023:2176-1
Security update for MozillaFirefox
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for MozillaFirefox fixes the following issues: Extended Support Release 102.11.0 ESR (bsc#1211175): - CVE-2023-32205: Browser prompts could have been obscured by popups - CVE-2023-32206: Crash in RLBox Expat driver - CVE-2023-32207: Potential permissions request bypass via clickjacking - CVE-2023-32211: Content process crash due to invalid wasm code - CVE-2023-32212: Potential spoof due to obscured address bar - CVE-2023-32213: Potential memory corruption in FileReader::DoReadData() - CVE-2023-32214: Potential DoS via exposed protocol handlers - CVE-2023-32215: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.2 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 102.11.0-112.159.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 102.11.0-112.159.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common | 102.11.0-112.159.1 |
Mostrar las 9 entradas de 3 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.2 | MozillaFirefox | 102.11.0-112.159.1 |
| SUSE Linux Enterprise 12.2 | MozillaFirefox-devel | 102.11.0-112.159.1 |
| SUSE Linux Enterprise 12.2 | MozillaFirefox-translations-common | 102.11.0-112.159.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox | 102.11.0-112.159.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox-devel | 102.11.0-112.159.1 |
| SUSE Linux Enterprise 12.4 | MozillaFirefox-translations-common | 102.11.0-112.159.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox | 102.11.0-112.159.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox-devel | 102.11.0-112.159.1 |
| SUSE Linux Enterprise 12.5 | MozillaFirefox-translations-common | 102.11.0-112.159.1 |
Referencias
- https://bugzilla.suse.com/1211175
- https://lists.suse.com/pipermail/sle-updates/2023-May/029361.html
- https://www.suse.com/security/cve/CVE-2023-32205/
- https://www.suse.com/security/cve/CVE-2023-32206/
- https://www.suse.com/security/cve/CVE-2023-32207/
- https://www.suse.com/security/cve/CVE-2023-32211/
- https://www.suse.com/security/cve/CVE-2023-32212/
- https://www.suse.com/security/cve/CVE-2023-32213/