[ALSA-2023:3143] firefox security update

Severity Important

Affected Packages 4

CVEs 7

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.11.0 ESR.

Security Fix(es):

Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)
Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)
Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)
Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)
Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)
Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)
Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package	Affected Version
pkg:rpm/almalinux/firefox?arch=x86_64&distro=almalinux-9.2	< 102.11.0-2.el9_2.alma
pkg:rpm/almalinux/firefox?arch=aarch64&distro=almalinux-9.2	< 102.11.0-2.el9_2.alma
pkg:rpm/almalinux/firefox-x11?arch=x86_64&distro=almalinux-9.2	< 102.11.0-2.el9_2.alma
pkg:rpm/almalinux/firefox-x11?arch=aarch64&distro=almalinux-9.2	< 102.11.0-2.el9_2.alma

ID

ALSA-2023:3143

Severity

important

URL

https://errata.almalinux.org/ALSA-2023:3143.html

Published

2023-05-16T00:00:00
(16 months ago)

Modified

2023-05-19T22:00:31
(16 months ago)

Rights

Other Advisories

Source	# ID	URL
RHSA	RHSA-2023:3143	https://access.redhat.com/errata/RHSA-2023:3143
CVE	CVE-2023-32205	https://access.redhat.com/security/cve/CVE-2023-32205
CVE	CVE-2023-32206	https://access.redhat.com/security/cve/CVE-2023-32206
CVE	CVE-2023-32207	https://access.redhat.com/security/cve/CVE-2023-32207
CVE	CVE-2023-32211	https://access.redhat.com/security/cve/CVE-2023-32211
CVE	CVE-2023-32212	https://access.redhat.com/security/cve/CVE-2023-32212
CVE	CVE-2023-32213	https://access.redhat.com/security/cve/CVE-2023-32213
CVE	CVE-2023-32215	https://access.redhat.com/security/cve/CVE-2023-32215
Bugzilla	2196736	https://bugzilla.redhat.com/2196736
Bugzilla	2196737	https://bugzilla.redhat.com/2196737
Bugzilla	2196738	https://bugzilla.redhat.com/2196738
Bugzilla	2196740	https://bugzilla.redhat.com/2196740
Bugzilla	2196741	https://bugzilla.redhat.com/2196741
Bugzilla	2196742	https://bugzilla.redhat.com/2196742
Bugzilla	2196753	https://bugzilla.redhat.com/2196753
Self	ALSA-2023:3143	https://errata.almalinux.org/9/ALSA-2023-3143.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch
Affected	pkg:rpm/almalinux/firefox?arch=x86_64&distro=almalinux-9.2	almalinux	firefox	< 102.11.0-2.el9_2.alma	almalinux-9.2	x86_64
Affected	pkg:rpm/almalinux/firefox?arch=aarch64&distro=almalinux-9.2	almalinux	firefox	< 102.11.0-2.el9_2.alma	almalinux-9.2	aarch64
Affected	pkg:rpm/almalinux/firefox-x11?arch=x86_64&distro=almalinux-9.2	almalinux	firefox-x11	< 102.11.0-2.el9_2.alma	almalinux-9.2	x86_64
Affected	pkg:rpm/almalinux/firefox-x11?arch=aarch64&distro=almalinux-9.2	almalinux	firefox-x11	< 102.11.0-2.el9_2.alma	almalinux-9.2	aarch64

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date