[RHSA-2023:3137] firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.11.0 ESR.
Security Fix(es):
Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)
Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)
Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)
Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)
Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)
Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)
Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Package | Affected Version |
---|---|
pkg:rpm/redhat/firefox?arch=x86_64&distro=redhat-7.9 | < 102.11.0-2.el7_9 |
pkg:rpm/redhat/firefox?arch=s390x&distro=redhat-7.9 | < 102.11.0-2.el7_9 |
pkg:rpm/redhat/firefox?arch=ppc64le&distro=redhat-7.9 | < 102.11.0-2.el7_9 |
pkg:rpm/redhat/firefox?arch=ppc64&distro=redhat-7.9 | < 102.11.0-2.el7_9 |
pkg:rpm/redhat/firefox?arch=i686&distro=redhat-7.9 | < 102.11.0-2.el7_9 |
- ID
- RHSA-2023:3137
- Severity
- important
- URL
- https://access.redhat.com/errata/RHSA-2023:3137
- Published
-
2023-05-16T00:00:00
(16 months ago) - Modified
-
2023-05-16T00:00:00
(16 months ago) - Rights
- Copyright 2023 Red Hat, Inc.
- Other Advisories
-
- ALAS2-2023-2051
- ALPINE:CVE-2023-32205
- ALPINE:CVE-2023-32206
- ALPINE:CVE-2023-32207
- ALPINE:CVE-2023-32211
- ALPINE:CVE-2023-32212
- ALPINE:CVE-2023-32213
- ALPINE:CVE-2023-32215
- ALSA-2023:3143
- ALSA-2023:3150
- ALSA-2023:3220
- ALSA-2023:3221
- DSA-5400-1
- DSA-5403-1
- ELSA-2023-3137
- ELSA-2023-3143
- ELSA-2023-3150
- ELSA-2023-3151
- ELSA-2023-3220
- ELSA-2023-3221
- GLSA-202312-03
- GLSA-202401-10
- MFSA-2023-16
- MFSA-2023-17
- MFSA-2023-18
- RHSA-2023:3143
- RHSA-2023:3150
- RHSA-2023:3151
- RHSA-2023:3220
- RHSA-2023:3221
- RLSA-2023:3220
- RLSA-2023:3221
- SSA:2023-129-01
- SSA:2023-130-01
- SUSE-SU-2023:2173-1
- SUSE-SU-2023:2175-1
- SUSE-SU-2023:2176-1
- SUSE-SU-2023:2211-1
- USN-6074-1
- USN-6075-1
- USN-6120-1
Source | # ID | Name | URL |
---|---|---|---|
Bugzilla | 2196736 | https://bugzilla.redhat.com/2196736 | |
Bugzilla | 2196737 | https://bugzilla.redhat.com/2196737 | |
Bugzilla | 2196738 | https://bugzilla.redhat.com/2196738 | |
Bugzilla | 2196740 | https://bugzilla.redhat.com/2196740 | |
Bugzilla | 2196741 | https://bugzilla.redhat.com/2196741 | |
Bugzilla | 2196742 | https://bugzilla.redhat.com/2196742 | |
Bugzilla | 2196753 | https://bugzilla.redhat.com/2196753 | |
RHSA | RHSA-2023:3137 | https://access.redhat.com/errata/RHSA-2023:3137 | |
CVE | CVE-2023-32205 | https://access.redhat.com/security/cve/CVE-2023-32205 | |
CVE | CVE-2023-32206 | https://access.redhat.com/security/cve/CVE-2023-32206 | |
CVE | CVE-2023-32207 | https://access.redhat.com/security/cve/CVE-2023-32207 | |
CVE | CVE-2023-32211 | https://access.redhat.com/security/cve/CVE-2023-32211 | |
CVE | CVE-2023-32212 | https://access.redhat.com/security/cve/CVE-2023-32212 | |
CVE | CVE-2023-32213 | https://access.redhat.com/security/cve/CVE-2023-32213 | |
CVE | CVE-2023-32215 | https://access.redhat.com/security/cve/CVE-2023-32215 |
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/redhat/firefox?arch=x86_64&distro=redhat-7.9 | redhat | firefox | < 102.11.0-2.el7_9 | redhat-7.9 | x86_64 | |
Affected | pkg:rpm/redhat/firefox?arch=s390x&distro=redhat-7.9 | redhat | firefox | < 102.11.0-2.el7_9 | redhat-7.9 | s390x | |
Affected | pkg:rpm/redhat/firefox?arch=ppc64le&distro=redhat-7.9 | redhat | firefox | < 102.11.0-2.el7_9 | redhat-7.9 | ppc64le | |
Affected | pkg:rpm/redhat/firefox?arch=ppc64&distro=redhat-7.9 | redhat | firefox | < 102.11.0-2.el7_9 | redhat-7.9 | ppc64 | |
Affected | pkg:rpm/redhat/firefox?arch=i686&distro=redhat-7.9 | redhat | firefox | < 102.11.0-2.el7_9 | redhat-7.9 | i686 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |