[RHSA-2023:0812] firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Package | Affected Version |
---|---|
pkg:rpm/redhat/firefox?arch=x86_64&distro=redhat-7.9 | < 102.8.0-2.el7_9 |
pkg:rpm/redhat/firefox?arch=s390x&distro=redhat-7.9 | < 102.8.0-2.el7_9 |
pkg:rpm/redhat/firefox?arch=ppc64le&distro=redhat-7.9 | < 102.8.0-2.el7_9 |
pkg:rpm/redhat/firefox?arch=ppc64&distro=redhat-7.9 | < 102.8.0-2.el7_9 |
pkg:rpm/redhat/firefox?arch=i686&distro=redhat-7.9 | < 102.8.0-2.el7_9 |
- ID
- RHSA-2023:0812
- Severity
- important
- URL
- https://access.redhat.com/errata/RHSA-2023:0812
- Published
-
2023-02-20T00:00:00
(19 months ago) - Modified
-
2023-02-20T00:00:00
(19 months ago) - Rights
- Copyright 2023 Red Hat, Inc.
- Other Advisories
-
- ALAS2-2023-1983
- ALPINE:CVE-2023-25728
- ALPINE:CVE-2023-25729
- ALPINE:CVE-2023-25730
- ALPINE:CVE-2023-25732
- ALPINE:CVE-2023-25735
- ALPINE:CVE-2023-25737
- ALPINE:CVE-2023-25739
- ALPINE:CVE-2023-25742
- ALPINE:CVE-2023-25744
- ALPINE:CVE-2023-25746
- ALSA-2023:0808
- ALSA-2023:0810
- ALSA-2023:0821
- ALSA-2023:0824
- DSA-5350-1
- DSA-5355-1
- ELSA-2023-0808
- ELSA-2023-0810
- ELSA-2023-0812
- ELSA-2023-0817
- ELSA-2023-0821
- ELSA-2023-0824
- GLSA-202305-35
- GLSA-202305-36
- MFSA-2023-05
- MFSA-2023-06
- MFSA-2023-07
- RHSA-2023:0808
- RHSA-2023:0810
- RHSA-2023:0817
- RHSA-2023:0821
- RHSA-2023:0824
- RLSA-2023:0808
- RLSA-2023:0810
- RLSA-2023:0821
- RLSA-2023:0824
- SSA:2023-045-01
- SSA:2023-047-01
- SUSE-SU-2023:0461-1
- SUSE-SU-2023:0466-1
- SUSE-SU-2023:0469-1
- SUSE-SU-2023:0599-1
- USN-5880-1
- USN-5943-1
- USN-6120-1
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/redhat/firefox?arch=x86_64&distro=redhat-7.9 | redhat | firefox | < 102.8.0-2.el7_9 | redhat-7.9 | x86_64 | |
Affected | pkg:rpm/redhat/firefox?arch=s390x&distro=redhat-7.9 | redhat | firefox | < 102.8.0-2.el7_9 | redhat-7.9 | s390x | |
Affected | pkg:rpm/redhat/firefox?arch=ppc64le&distro=redhat-7.9 | redhat | firefox | < 102.8.0-2.el7_9 | redhat-7.9 | ppc64le | |
Affected | pkg:rpm/redhat/firefox?arch=ppc64&distro=redhat-7.9 | redhat | firefox | < 102.8.0-2.el7_9 | redhat-7.9 | ppc64 | |
Affected | pkg:rpm/redhat/firefox?arch=i686&distro=redhat-7.9 | redhat | firefox | < 102.8.0-2.el7_9 | redhat-7.9 | i686 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |