SUSE-SU-2023:3899-1
Security update for MozillaFirefox
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.3.0 ESR (MFSA 2023-42, bsc#1215575): Security fixes: - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 (bmo#1846683). - CVE-2023-5169: Out-of-bounds write in PathOps (bmo#1846685). - CVE-2023-5171: Use-after-free in Ion Compiler (bmo#1851599). - CVE-2023-5174: Double-free in process spawning on Windows (bmo#1848454). - CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195). Other fixes: - Fix broken build with newer binutils (bsc#1215309)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.1 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common y 1 más | 115.3.0-150000.150.107.1 |
Mostrar las 4 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.1 | MozillaFirefox | 115.3.0-150000.150.107.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-devel | 115.3.0-150000.150.107.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-translations-common | 115.3.0-150000.150.107.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-translations-other | 115.3.0-150000.150.107.1 |
Referencias
- https://bugzilla.suse.com/1215309
- https://bugzilla.suse.com/1215575
- https://lists.suse.com/pipermail/sle-security-updates/2023-September/016460.html
- https://www.suse.com/security/cve/CVE-2023-5168/
- https://www.suse.com/security/cve/CVE-2023-5169/
- https://www.suse.com/security/cve/CVE-2023-5171/
- https://www.suse.com/security/cve/CVE-2023-5174/
- https://www.suse.com/security/cve/CVE-2023-5176/