Lucene search

K
slackwareSlackware Linux ProjectSSA-2023-129-01
HistoryMay 09, 2023 - 8:19 p.m.

[slackware-security] mozilla-firefox

2023-05-0920:19:44
Slackware Linux Project
www.slackware.com
17
security fixes
mozilla
slackware

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

59.9%

New mozilla-firefox packages are available for Slackware 15.0 and -current to
fix security issues.

Here are the details from the Slackware 15.0 ChangeLog:

patches/packages/mozilla-firefox-102.11.0esr-i686-1_slack15.0.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/102.11.0/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2023-17/
https://vulners.com/cve/CVE-2023-32205
https://vulners.com/cve/CVE-2023-32206
https://vulners.com/cve/CVE-2023-32207
https://vulners.com/cve/CVE-2023-32211
https://vulners.com/cve/CVE-2023-32212
https://vulners.com/cve/CVE-2023-32213
https://vulners.com/cve/CVE-2023-32214
https://vulners.com/cve/CVE-2023-32215
(* Security fix *)

Where to find the new packages:

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)

Also see the “Get Slack” section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/mozilla-firefox-102.11.0esr-i686-1_slack15.0.txz

Updated package for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/mozilla-firefox-102.11.0esr-x86_64-1_slack15.0.txz

Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-firefox-113.0-i686-1.txz

Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-firefox-113.0-x86_64-1.txz

MD5 signatures:

Slackware 15.0 package:
b2d68ceb196c0b719a8f02956f20294b mozilla-firefox-102.11.0esr-i686-1_slack15.0.txz

Slackware x86_64 15.0 package:
dfaccaf7c75b7a57d195b4912f040a8b mozilla-firefox-102.11.0esr-x86_64-1_slack15.0.txz

Slackware -current package:
5c75dd333e70b9b27f301dfdcdbf4760 xap/mozilla-firefox-113.0-i686-1.txz

Slackware x86_64 -current package:
6787b49b838b401283d665546fbca85a xap/mozilla-firefox-113.0-x86_64-1.txz

Installation instructions:

Upgrade the package as root:
> upgradepkg mozilla-firefox-102.11.0esr-i686-1_slack15.0.txz

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

59.9%