Important: firefox security update

🗓️ 27 Nov 2023 00:00:00Reported by AlmaLinuxType

almalinux🔗 errata.almalinux.org👁 46 Views

Important: Firefox security update Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.5.0 ESR. Security Fix(es): * Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204) * Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205) * Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206) * Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207) * Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212) * Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208) * Mozilla: Incorrect parsing of relative URLs starting with "///" (CVE-2023-6209

Reporter	Title	Published	Views	Family All 487
ATTACKERKB	CVE-2023-6209	21 Nov 202300:00	–	attackerkb
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2024-2379)	9 Jan 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2024-019)	9 Jan 202400:00	–	nessus
Tenable Nessus	CentOS 8 : thunderbird (CESA-2023:7500)	8 Feb 202400:00	–	nessus
Tenable Nessus	CentOS 8 : firefox (CESA-2023:7508)	8 Feb 202400:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2023:7505)	22 Dec 202300:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2023:7509)	22 Dec 202300:00	–	nessus
Tenable Nessus	Debian dla-3661 : firefox-esr - security update	23 Nov 202300:00	–	nessus
Tenable Nessus	Debian dla-3674 : thunderbird - security update	30 Nov 202300:00	–	nessus
Tenable Nessus	Debian DSA-5561-1 : firefox-esr - security update	22 Nov 202300:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	8	x86_64	firefox	115.5.0-1.el8_9.alma.1	firefox-115.5.0-1.el8_9.alma.1.x86_64.rpm
almalinux	8	aarch64	firefox	115.5.0-1.el8_9.alma.1	firefox-115.5.0-1.el8_9.alma.1.aarch64.rpm
almalinux	8	ppc64le	firefox	115.5.0-1.el8_9.alma.1	firefox-115.5.0-1.el8_9.alma.1.ppc64le.rpm
almalinux	8	s390x	firefox	115.5.0-1.el8_9.alma.1	firefox-115.5.0-1.el8_9.alma.1.s390x.rpm

Source	Link
access	www.access.redhat.com/errata/RHSA-2023:7508
access	www.access.redhat.com/security/cve/CVE-2023-6204
access	www.access.redhat.com/security/cve/CVE-2023-6205
access	www.access.redhat.com/security/cve/CVE-2023-6206
access	www.access.redhat.com/security/cve/CVE-2023-6207
access	www.access.redhat.com/security/cve/CVE-2023-6208
access	www.access.redhat.com/security/cve/CVE-2023-6209
access	www.access.redhat.com/security/cve/CVE-2023-6212
bugzilla	www.bugzilla.redhat.com/2250896
bugzilla	www.bugzilla.redhat.com/2250897

29 Nov 2023 17:25Current

8High risk

Vulners AI Score8

CVSS 3.18.8

EPSS0.01406

SSVC