SUSE-SU-2023:1855-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:1855-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2023:1855-1
- Related
- Published
- 2023-04-14T14:06:16Z
- Modified
- 2023-04-14T14:06:16Z
- Summary
- Security update for MozillaFirefox
- Details
-
This update for MozillaFirefox fixes the following issues:
- Firefox Extended Support Release 102.10.0 ESR (bsc#1210212)
- CVE-2023-29531: Out-of-bound memory access in WebGL on macOS
- CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass
- CVE-2023-29533: Fullscreen notification obscured
- MFSA-TMP-2023-0001: Double-free in libwebp
- CVE-2023-29535: Potential Memory Corruption following Garbage Collector compaction
- CVE-2023-29536: Invalid free from JavaScript code
- CVE-2023-29539: Content-Disposition filename truncation leads to Reflected File Download
- CVE-2023-29541: Files with malicious extensions could have been downloaded unsafely on Linux
- CVE-2023-29542: Bypass of file download extension restrictions
- CVE-2023-29545: Windows Save As dialog resolved environment variables
- CVE-2023-1945: Memory Corruption in Safe Browsing Code
- CVE-2023-29548: Incorrect optimization result on ARM64
- CVE-2023-29550: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10
- References
-
- https://www.suse.com/support/update/announcement/2023/suse-su-20231855-1/
- https://bugzilla.suse.com/1210212
- https://www.suse.com/security/cve/CVE-2023-1945
- https://www.suse.com/security/cve/CVE-2023-29531
- https://www.suse.com/security/cve/CVE-2023-29532
- https://www.suse.com/security/cve/CVE-2023-29533
- https://www.suse.com/security/cve/CVE-2023-29535
- https://www.suse.com/security/cve/CVE-2023-29536
- https://www.suse.com/security/cve/CVE-2023-29539
- https://www.suse.com/security/cve/CVE-2023-29541
- https://www.suse.com/security/cve/CVE-2023-29542
- https://www.suse.com/security/cve/CVE-2023-29545
- https://www.suse.com/security/cve/CVE-2023-29548
- https://www.suse.com/security/cve/CVE-2023-29550
Affected packages
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS
SUSE:Linux Enterprise Real Time 15 SP3 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3
SUSE:Linux Enterprise Server 15 SP2-LTSS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS
SUSE:Linux Enterprise Server 15 SP3-LTSS / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3
SUSE:Enterprise Storage 7 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%207
SUSE:Enterprise Storage 7.1 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%207.1
openSUSE:Leap 15.4 / MozillaFirefox
Package
- Name
- MozillaFirefox
- Purl
- purl:rpm/suse/MozillaFirefox&distro=openSUSE%20Leap%2015.4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed102.10.0-150200.152.84.1
Ecosystem specific
{
"binaries": [
{
"MozillaFirefox": "102.10.0-150200.152.84.1",
"MozillaFirefox-translations-common": "102.10.0-150200.152.84.1",
"MozillaFirefox-devel": "102.10.0-150200.152.84.1",
"MozillaFirefox-translations-other": "102.10.0-150200.152.84.1",
"MozillaFirefox-branding-upstream": "102.10.0-150200.152.84.1"
}
]
}