SUSE-SU-2023:2175-1
Security update for MozillaFirefox
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for MozillaFirefox fixes the following issues: Extended Support Release 102.11.0 ESR (bsc#1211175): - CVE-2023-32205: Browser prompts could have been obscured by popups - CVE-2023-32206: Crash in RLBox Expat driver - CVE-2023-32207: Potential permissions request bypass via clickjacking - CVE-2023-32211: Content process crash due to invalid wasm code - CVE-2023-32212: Potential spoof due to obscured address bar - CVE-2023-32213: Potential memory corruption in FileReader::DoReadData() - CVE-2023-32214: Potential DoS via exposed protocol handlers - CVE-2023-32215: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.1 | MozillaFirefox, MozillaFirefox-devel, MozillaFirefox-translations-common and 1 more | 102.11.0-150000.150.85.1 |
Show all 4 entries from 1 source
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.1 | MozillaFirefox | 102.11.0-150000.150.85.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-devel | 102.11.0-150000.150.85.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-translations-common | 102.11.0-150000.150.85.1 |
| SUSE Linux Enterprise 15.1 | MozillaFirefox-translations-other | 102.11.0-150000.150.85.1 |
References
- https://bugzilla.suse.com/1211175
- https://lists.suse.com/pipermail/sle-updates/2023-May/029362.html
- https://www.suse.com/security/cve/CVE-2023-32205/
- https://www.suse.com/security/cve/CVE-2023-32206/
- https://www.suse.com/security/cve/CVE-2023-32207/
- https://www.suse.com/security/cve/CVE-2023-32211/
- https://www.suse.com/security/cve/CVE-2023-32212/
- https://www.suse.com/security/cve/CVE-2023-32213/