[ALSA-2023:0810] firefox security update
Severity
Important
Affected Packages
4
CVEs
12
firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
- Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)
- Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
- Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
- Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
- Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
- Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
- Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
- Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
- Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
- Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
- Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
- Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Package | Affected Version |
---|---|
pkg:rpm/almalinux/firefox?arch=x86_64&distro=almalinux-9.1 | < 102.8.0-2.el9_1.alma |
pkg:rpm/almalinux/firefox?arch=aarch64&distro=almalinux-9.1 | < 102.8.0-2.el9_1.alma |
pkg:rpm/almalinux/firefox-x11?arch=x86_64&distro=almalinux-9.1 | < 102.8.0-2.el9_1.alma |
pkg:rpm/almalinux/firefox-x11?arch=aarch64&distro=almalinux-9.1 | < 102.8.0-2.el9_1.alma |
- ID
- ALSA-2023:0810
- Severity
- important
- URL
- https://errata.almalinux.org/ALSA-2023:0810.html
- Published
-
2023-02-20T00:00:00
(19 months ago) - Modified
-
2023-02-21T17:40:39
(19 months ago) - Rights
- Copyright 2023 AlmaLinux OS
- Other Advisories
-
- ALAS-2023-1736
- ALAS2-2023-1983
- ALAS2-2023-1992
- ALPINE:CVE-2023-0767
- ALPINE:CVE-2023-25728
- ALPINE:CVE-2023-25729
- ALPINE:CVE-2023-25730
- ALPINE:CVE-2023-25732
- ALPINE:CVE-2023-25735
- ALPINE:CVE-2023-25737
- ALPINE:CVE-2023-25739
- ALPINE:CVE-2023-25742
- ALPINE:CVE-2023-25744
- ALPINE:CVE-2023-25746
- ALSA-2023:0808
- ALSA-2023:0821
- ALSA-2023:0824
- ALSA-2023:1252
- ALSA-2023:1368
- DSA-5350-1
- DSA-5353-1
- DSA-5355-1
- ELSA-2023-0808
- ELSA-2023-0810
- ELSA-2023-0812
- ELSA-2023-0817
- ELSA-2023-0821
- ELSA-2023-0824
- ELSA-2023-12238
- ELSA-2023-1252
- ELSA-2023-1332
- ELSA-2023-1368
- GLSA-202305-35
- GLSA-202305-36
- MFSA-2023-05
- MFSA-2023-06
- MFSA-2023-07
- RHSA-2023:0808
- RHSA-2023:0810
- RHSA-2023:0812
- RHSA-2023:0817
- RHSA-2023:0821
- RHSA-2023:0824
- RHSA-2023:1252
- RHSA-2023:1332
- RHSA-2023:1368
- RLSA-2023:0808
- RLSA-2023:0810
- RLSA-2023:0821
- RLSA-2023:0824
- RLSA-2023:1252
- RLSA-2023:1368
- SSA:2023-045-01
- SSA:2023-047-01
- SUSE-SU-2023:0434-1
- SUSE-SU-2023:0443-1
- SUSE-SU-2023:0461-1
- SUSE-SU-2023:0466-1
- SUSE-SU-2023:0468-1
- SUSE-SU-2023:0469-1
- SUSE-SU-2023:0599-1
- USN-5880-1
- USN-5892-1
- USN-5892-2
- USN-5943-1
- USN-6120-1
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/almalinux/firefox?arch=x86_64&distro=almalinux-9.1 | almalinux | firefox | < 102.8.0-2.el9_1.alma | almalinux-9.1 | x86_64 | |
Affected | pkg:rpm/almalinux/firefox?arch=aarch64&distro=almalinux-9.1 | almalinux | firefox | < 102.8.0-2.el9_1.alma | almalinux-9.1 | aarch64 | |
Affected | pkg:rpm/almalinux/firefox-x11?arch=x86_64&distro=almalinux-9.1 | almalinux | firefox-x11 | < 102.8.0-2.el9_1.alma | almalinux-9.1 | x86_64 | |
Affected | pkg:rpm/almalinux/firefox-x11?arch=aarch64&distro=almalinux-9.1 | almalinux | firefox-x11 | < 102.8.0-2.el9_1.alma | almalinux-9.1 | aarch64 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |