1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2023:0466-1

[SUSE-SU-2023:0466-1] Security update for MozillaFirefox

Severity Important
Affected Packages 27
CVEs 14
Info Packages References Vulnerabilities

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Updated to version 102.8.0 ESR (bsc#1208144):

  • CVE-2023-25728: Fixed content security policy leak in violation reports using iframes.
  • CVE-2023-25730: Fixed screen hijack via browser fullscreen mode.
  • CVE-2023-25743: Fixed Fullscreen notification not being shown in Firefox Focus.
  • CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS.
  • CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey.
  • CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry.
  • CVE-2023-25738: Fixed printing on Windows which could potentially crash Firefox with some device drivers.
  • CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.
  • CVE-2023-25729: Fixed extensions opening external schemes without user knowledge.
  • CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream.
  • CVE-2023-25734: Fixed opening local .url files that causes unexpected network loads.
  • CVE-2023-25742: Fixed tab crash by Web Crypto ImportKey.
  • CVE-2023-25744: Fixed Memory safety bugs.
  • CVE-2023-25746: Fixed Memory safety bugs.
Package Affected Version
pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12&sp=2 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox?arch=aarch64&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox?arch=aarch64&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-12&sp=2 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-translations-common?arch=s390x&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-translations-common?arch=s390x&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-translations-common?arch=ppc64le&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-translations-common?arch=ppc64le&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-translations-common?arch=aarch64&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-translations-common?arch=aarch64&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-12&sp=2 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-devel?arch=s390x&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-devel?arch=s390x&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-devel?arch=ppc64le&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-devel?arch=ppc64le&distro=sles-12&sp=4 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-devel?arch=aarch64&distro=sles-12&sp=5 < 102.8.0-112.150.1
pkg:rpm/suse/MozillaFirefox-devel?arch=aarch64&distro=sles-12&sp=4 < 102.8.0-112.150.1
ID
SUSE-SU-2023:0466-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2023/suse-su-20230466-1/
Published
2023-02-21T08:08:50
(19 months ago)
Modified
2023-02-21T08:08:50
(19 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Source # ID Name URL
Suse SUSE ratings https://www.suse.com/support/security/rating/
Suse URL of this CSAF notice https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_0466-1.json
Suse URL for SUSE-SU-2023:0466-1 https://www.suse.com/support/update/announcement/2023/suse-su-20230466-1/
Suse E-Mail link for SUSE-SU-2023:0466-1 https://lists.suse.com/pipermail/sle-security-updates/2023-February/013853.html
Bugzilla SUSE Bug 1208138 https://bugzilla.suse.com/1208138
Bugzilla SUSE Bug 1208144 https://bugzilla.suse.com/1208144
CVE SUSE CVE CVE-2023-0767 page https://www.suse.com/security/cve/CVE-2023-0767/
CVE SUSE CVE CVE-2023-25728 page https://www.suse.com/security/cve/CVE-2023-25728/
CVE SUSE CVE CVE-2023-25729 page https://www.suse.com/security/cve/CVE-2023-25729/
CVE SUSE CVE CVE-2023-25730 page https://www.suse.com/security/cve/CVE-2023-25730/
CVE SUSE CVE CVE-2023-25732 page https://www.suse.com/security/cve/CVE-2023-25732/
CVE SUSE CVE CVE-2023-25734 page https://www.suse.com/security/cve/CVE-2023-25734/
CVE SUSE CVE CVE-2023-25735 page https://www.suse.com/security/cve/CVE-2023-25735/
CVE SUSE CVE CVE-2023-25737 page https://www.suse.com/security/cve/CVE-2023-25737/
CVE SUSE CVE CVE-2023-25738 page https://www.suse.com/security/cve/CVE-2023-25738/
CVE SUSE CVE CVE-2023-25739 page https://www.suse.com/security/cve/CVE-2023-25739/
CVE SUSE CVE CVE-2023-25742 page https://www.suse.com/security/cve/CVE-2023-25742/
CVE SUSE CVE CVE-2023-25743 page https://www.suse.com/security/cve/CVE-2023-25743/
CVE SUSE CVE CVE-2023-25744 page https://www.suse.com/security/cve/CVE-2023-25744/
CVE SUSE CVE CVE-2023-25746 page https://www.suse.com/security/cve/CVE-2023-25746/
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12&sp=5 suse MozillaFirefox < 102.8.0-112.150.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12&sp=4 suse MozillaFirefox < 102.8.0-112.150.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-12&sp=2 suse MozillaFirefox < 102.8.0-112.150.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-12&sp=5 suse MozillaFirefox < 102.8.0-112.150.1 sles-12 s390x
Affected pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-12&sp=4 suse MozillaFirefox < 102.8.0-112.150.1 sles-12 s390x
Affected pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-12&sp=5 suse MozillaFirefox < 102.8.0-112.150.1 sles-12 ppc64le
Affected pkg:rpm/suse/MozillaFirefox?arch=ppc64le&distro=sles-12&sp=4 suse MozillaFirefox < 102.8.0-112.150.1 sles-12 ppc64le
Affected pkg:rpm/suse/MozillaFirefox?arch=aarch64&distro=sles-12&sp=5 suse MozillaFirefox < 102.8.0-112.150.1 sles-12 aarch64
Affected pkg:rpm/suse/MozillaFirefox?arch=aarch64&distro=sles-12&sp=4 suse MozillaFirefox < 102.8.0-112.150.1 sles-12 aarch64
Affected pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-12&sp=5 suse MozillaFirefox-translations-common < 102.8.0-112.150.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-12&sp=4 suse MozillaFirefox-translations-common < 102.8.0-112.150.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox-translations-common?arch=x86_64&distro=sles-12&sp=2 suse MozillaFirefox-translations-common < 102.8.0-112.150.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox-translations-common?arch=s390x&distro=sles-12&sp=5 suse MozillaFirefox-translations-common < 102.8.0-112.150.1 sles-12 s390x
Affected pkg:rpm/suse/MozillaFirefox-translations-common?arch=s390x&distro=sles-12&sp=4 suse MozillaFirefox-translations-common < 102.8.0-112.150.1 sles-12 s390x
Affected pkg:rpm/suse/MozillaFirefox-translations-common?arch=ppc64le&distro=sles-12&sp=5 suse MozillaFirefox-translations-common < 102.8.0-112.150.1 sles-12 ppc64le
Affected pkg:rpm/suse/MozillaFirefox-translations-common?arch=ppc64le&distro=sles-12&sp=4 suse MozillaFirefox-translations-common < 102.8.0-112.150.1 sles-12 ppc64le
Affected pkg:rpm/suse/MozillaFirefox-translations-common?arch=aarch64&distro=sles-12&sp=5 suse MozillaFirefox-translations-common < 102.8.0-112.150.1 sles-12 aarch64
Affected pkg:rpm/suse/MozillaFirefox-translations-common?arch=aarch64&distro=sles-12&sp=4 suse MozillaFirefox-translations-common < 102.8.0-112.150.1 sles-12 aarch64
Affected pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-12&sp=5 suse MozillaFirefox-devel < 102.8.0-112.150.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-12&sp=4 suse MozillaFirefox-devel < 102.8.0-112.150.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox-devel?arch=x86_64&distro=sles-12&sp=2 suse MozillaFirefox-devel < 102.8.0-112.150.1 sles-12 x86_64
Affected pkg:rpm/suse/MozillaFirefox-devel?arch=s390x&distro=sles-12&sp=5 suse MozillaFirefox-devel < 102.8.0-112.150.1 sles-12 s390x
Affected pkg:rpm/suse/MozillaFirefox-devel?arch=s390x&distro=sles-12&sp=4 suse MozillaFirefox-devel < 102.8.0-112.150.1 sles-12 s390x
Affected pkg:rpm/suse/MozillaFirefox-devel?arch=ppc64le&distro=sles-12&sp=5 suse MozillaFirefox-devel < 102.8.0-112.150.1 sles-12 ppc64le
Affected pkg:rpm/suse/MozillaFirefox-devel?arch=ppc64le&distro=sles-12&sp=4 suse MozillaFirefox-devel < 102.8.0-112.150.1 sles-12 ppc64le
Affected pkg:rpm/suse/MozillaFirefox-devel?arch=aarch64&distro=sles-12&sp=5 suse MozillaFirefox-devel < 102.8.0-112.150.1 sles-12 aarch64
Affected pkg:rpm/suse/MozillaFirefox-devel?arch=aarch64&distro=sles-12&sp=4 suse MozillaFirefox-devel < 102.8.0-112.150.1 sles-12 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date