SUSE-SU-2023:2175-1
Security update for MozillaFirefox
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for MozillaFirefox fixes the following issues: Extended Support Release 102.11.0 ESR (bsc#1211175): - CVE-2023-32205: Browser prompts could have been obscured by popups - CVE-2023-32206: Crash in RLBox Expat driver - CVE-2023-32207: Potential permissions request bypass via clickjacking - CVE-2023-32211: Content process crash due to invalid wasm code - CVE-2023-32212: Potential spoof due to obscured address bar - CVE-2023-32213: Potential memory corruption in FileReader::DoReadData() - CVE-2023-32214: Potential DoS via exposed protocol handlers - CVE-2023-32215: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 15.1 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common ve 1 tane daha | 102.11.0-150000.150.85.1 |
1 kaynaktaki 4 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 15.1 | MozillaFirefox | 102.11.0-150000.150.85.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-devel | 102.11.0-150000.150.85.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-translations-common | 102.11.0-150000.150.85.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-translations-other | 102.11.0-150000.150.85.1 |
Referanslar
- https://bugzilla.suse.com/1211175
- https://lists.suse.com/pipermail/sle-updates/2023-May/029362.html
- https://www.suse.com/security/cve/CVE-2023-32205/
- https://www.suse.com/security/cve/CVE-2023-32206/
- https://www.suse.com/security/cve/CVE-2023-32207/
- https://www.suse.com/security/cve/CVE-2023-32211/
- https://www.suse.com/security/cve/CVE-2023-32212/
- https://www.suse.com/security/cve/CVE-2023-32213/