Lucene search
AlmaLinuxALSA-2023:3590HistoryJun 14, 2023 - 12:00 a.m.
Important: firefox security update
2023-06-1400:00:00
errata.almalinux.org
9
mozilla
firefox
security update
version 102.12.0 esr
click-jacking
memory safety
cve-2023-34414
cve-2023-34416
unix
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
73.4%
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.12.0 ESR.
Security Fix(es):
- Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)
- Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | aarch64 | firefox | < 102.12.0-1.el8_8.alma | firefox-102.12.0-1.el8_8.alma.aarch64.rpm |
| almalinux | 8 | x86_64 | firefox | < 102.12.0-1.el8_8.alma | firefox-102.12.0-1.el8_8.alma.x86_64.rpm |
| almalinux | 8 | ppc64le | firefox | < 102.12.0-1.el8_8.alma | firefox-102.12.0-1.el8_8.alma.ppc64le.rpm |
| almalinux | 8 | s390x | firefox | < 102.12.0-1.el8_8.alma | firefox-102.12.0-1.el8_8.alma.s390x.rpm |
Related
nessus
nessus
SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2023:2441-1)
2023-06-08 00:00:00
Debian DSA-5423-1 : thunderbird - security update
2023-06-12 00:00:00
Oracle Linux 7 : thunderbird (ELSA-2023-3563)
2023-06-12 00:00:00
redhat
redhat
(RHSA-2023:3561) Important: firefox security update
2023-06-12 08:41:09
(RHSA-2023:3564) Important: thunderbird security update
2023-06-12 08:41:34
(RHSA-2023:3589) Important: firefox security update
2023-06-14 07:58:49
oraclelinux
oraclelinux
firefox security update
2023-06-17 00:00:00
thunderbird security update
2023-06-12 00:00:00
firefox security update
2023-06-14 00:00:00
rocky
rocky
firefox security update
2023-08-31 16:54:34
thunderbird security update
2023-06-24 18:53:41
thunderbird security update
2023-06-24 18:52:51
openvas
openvas
Debian: Security Advisory (DSA-5423-1)
2023-06-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2441-1)
2023-06-08 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2023-06-06 20:30:21
mageia
mageia
Updated firefox/nss packages fix security vulnerability
2023-06-15 10:27:14
Updated thunderbird packages fix security vulnerability
2023-06-15 10:27:14
osv
osv
Important: thunderbird security update
2023-06-14 00:00:00
Important: firefox security update
2023-06-14 00:00:00
firefox-esr - security update
2023-06-08 00:00:00
debian
debian
[SECURITY] [DLA 3452-1] thunderbird security update
2023-06-12 09:38:35
[SECURITY] [DSA 5423-1] thunderbird security update
2023-06-11 15:25:43
[SECURITY] [DSA 5421-1] firefox-esr security update
2023-06-07 21:05:06
almalinux
almalinux
Important: thunderbird security update
2023-06-14 00:00:00
Important: firefox security update
2023-06-14 00:00:00
Important: thunderbird security update
2023-06-14 00:00:00
kaspersky
kaspersky
KLA50305 Multiple vulnerabilities in Mozilla Thunderbird
2023-06-07 00:00:00
KLA49379 Multiple vulnerabilities in Mozilla Firefox ESR
2023-06-06 00:00:00
KLA49378 Multiple vulnerabilities in Mozilla Firefox
2023-06-06 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 102.12 — Mozilla
2023-06-07 00:00:00
Security Vulnerabilities fixed in Firefox ESR 102.12 — Mozilla
2023-06-06 00:00:00
Security Vulnerabilities fixed in Firefox 114 — Mozilla
2023-06-06 00:00:00
redos
redos
ROS-20230615-04
2023-06-15 00:00:00
ubuntu
ubuntu
Firefox regressions
2023-06-21 00:00:00
Firefox vulnerabilities
2023-06-07 00:00:00
Firefox regressions
2023-06-13 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2023-08-06 17:31:12
Denial Of Service (DoS)
2023-08-06 17:30:29
prion
prion
Memory corruption
2023-06-19 11:15:00
Cross site scripting
2023-06-19 11:15:00
cve
cve
CVE-2023-34414
2023-06-19 11:15:10
CVE-2023-34416
2023-06-19 11:15:11
debiancve
debiancve
CVE-2023-34416
2023-06-19 11:15:11
CVE-2023-34414
2023-06-19 11:15:10
nvd
nvd
CVE-2023-34416
2023-06-19 11:15:11
CVE-2023-34414
2023-06-19 11:15:10
redhatcve
redhatcve
CVE-2023-34414
2023-06-06 14:55:48
CVE-2023-34416
2023-06-06 14:55:57
ubuntucve
ubuntucve
CVE-2023-34416
2023-06-07 00:00:00
CVE-2023-34414
2023-06-07 00:00:00
alpinelinux
alpinelinux
CVE-2023-34416
2023-06-19 11:15:11
CVE-2023-34414
2023-06-19 11:15:10
cvelist
cvelist
CVE-2023-34416
2023-06-19 10:17:18
CVE-2023-34414
2023-06-19 10:14:49
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2023-12-20 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
ibm
ibm
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
73.4%
Related for ALSA-2023:3590