[RHSA-2023:3220] firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.11.0 ESR.
Security Fix(es):
Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)
Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)
Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)
Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)
Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)
Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)
Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Package | Affected Version |
|---|---|
 pkg:rpm/redhat/firefox?arch=x86_64&distro=redhat-8.7
|
< 102.11.0-2.el8_7 |
|
pkg:rpm/redhat/firefox?arch=s390x&distro=redhat-8.7
|
< 102.11.0-2.el8_7 |
|
pkg:rpm/redhat/firefox?arch=ppc64le&distro=redhat-8.7
|
< 102.11.0-2.el8_7 |
|
pkg:rpm/redhat/firefox?arch=aarch64&distro=redhat-8.7
|
< 102.11.0-2.el8_7 |
- ID
- RHSA-2023:3220
- Severity
- important
- URL
- https://access.redhat.com/errata/RHSA-2023:3220
- Published
-
2023-05-18T00:00:00
(16 months ago) - Modified
-
2023-05-18T00:00:00
(16 months ago) - Rights
- Copyright 2023 Red Hat, Inc.
- Other Advisories
-
-
ALAS2-2023-2051
-
ALPINE:CVE-2023-32205
-
ALPINE:CVE-2023-32206
-
ALPINE:CVE-2023-32207
-
ALPINE:CVE-2023-32211
-
ALPINE:CVE-2023-32212
-
ALPINE:CVE-2023-32213
-
ALPINE:CVE-2023-32215
-
ALSA-2023:3143
-
ALSA-2023:3150
-
ALSA-2023:3220
-
ALSA-2023:3221
-
DSA-5400-1
-
DSA-5403-1
-
ELSA-2023-3137
-
ELSA-2023-3143
-
ELSA-2023-3150
-
ELSA-2023-3151
-
ELSA-2023-3220
-
ELSA-2023-3221
-
GLSA-202312-03
-
GLSA-202401-10
-
MFSA-2023-16
-
MFSA-2023-17
-
MFSA-2023-18
-
RHSA-2023:3137
-
RHSA-2023:3143
-
RHSA-2023:3150
-
RHSA-2023:3151
-
RHSA-2023:3221
-
RLSA-2023:3220
-
RLSA-2023:3221
-
SSA:2023-129-01
-
SSA:2023-130-01
-
SUSE-SU-2023:2173-1
-
SUSE-SU-2023:2175-1
-
SUSE-SU-2023:2176-1
-
SUSE-SU-2023:2211-1
-
USN-6074-1
-
USN-6075-1
-
USN-6120-1
-
| Source | # ID | Name | URL |
|---|---|---|---|
| Bugzilla | 2196736 |
|
|
| Bugzilla | 2196737 |
|
|
| Bugzilla | 2196738 |
|
|
| Bugzilla | 2196740 |
|
|
| Bugzilla | 2196741 |
|
|
| Bugzilla | 2196742 |
|
|
| Bugzilla | 2196753 |
|
|
| RHSA | RHSA-2023:3220 |
|
|
| CVE | CVE-2023-32205 |
|
|
| CVE | CVE-2023-32206 |
|
|
| CVE | CVE-2023-32207 |
|
|
| CVE | CVE-2023-32211 |
|
|
| CVE | CVE-2023-32212 |
|
|
| CVE | CVE-2023-32213 |
|
|
| CVE | CVE-2023-32215 |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/redhat/firefox?arch=x86_64&distro=redhat-8.7 | redhat |
firefox
|
< 102.11.0-2.el8_7 | redhat-8.7 | x86_64 | |
| Affected | pkg:rpm/redhat/firefox?arch=s390x&distro=redhat-8.7 | redhat |
firefox
|
< 102.11.0-2.el8_7 | redhat-8.7 | s390x | |
| Affected | pkg:rpm/redhat/firefox?arch=ppc64le&distro=redhat-8.7 | redhat |
firefox
|
< 102.11.0-2.el8_7 | redhat-8.7 | ppc64le | |
| Affected | pkg:rpm/redhat/firefox?arch=aarch64&distro=redhat-8.7 | redhat |
firefox
|
< 102.11.0-2.el8_7 | redhat-8.7 | aarch64 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |