Lucene search

K
almalinuxAlmaLinuxALSA-2023:7508
HistoryNov 27, 2023 - 12:00 a.m.

Important: firefox security update

2023-11-2700:00:00
errata.almalinux.org
9
firefox
security update
open-source
web browser
standards compliance
performance
portability
version
cve-2023-6204
cve-2023-6205
cve-2023-6206
cve-2023-6207
cve-2023-6212
cve-2023-6208
cve-2023-6209
memory access
use-after-free
clickjacking
memory safety bugs
parsing
unix

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.5.0 ESR.

Security Fix(es):

  • Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204)
  • Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205)
  • Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206)
  • Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207)
  • Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212)
  • Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208)
  • Mozilla: Incorrect parsing of relative URLs starting with “///” (CVE-2023-6209)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.