SUSE-SU-2023:3519-1
SUSE-SU-2023:3519-1 · Security update for MozillaFirefox
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for MozillaFirefox fixes the following issues: Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606). - CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688) - CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback (bmo#1846689) - CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694) - CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397) - CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884) - CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007) - CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079) - CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046) - CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758) - CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874) - CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030) - CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529) - CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP2-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox SUSE:Linux Enterprise Server 15 SP3-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP2
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox SUSE:Enterprise Storage 7
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox SUSE:Enterprise Storage 7.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox openSUSE:Leap 15.4
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
mozillafirefox openSUSE:Leap 15.5
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.2.0-150200.152.102.1
Actualiza a 115.2.0-150200.152.102.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2023/suse-su-20233519-1/
- https://bugzilla.suse.com/1214606
- https://www.suse.com/security/cve/CVE-2023-4051
- https://www.suse.com/security/cve/CVE-2023-4053
- https://www.suse.com/security/cve/CVE-2023-4574
- https://www.suse.com/security/cve/CVE-2023-4575
- https://www.suse.com/security/cve/CVE-2023-4576
- https://www.suse.com/security/cve/CVE-2023-4577
- https://www.suse.com/security/cve/CVE-2023-4578
- https://www.suse.com/security/cve/CVE-2023-4580
- https://www.suse.com/security/cve/CVE-2023-4581
- https://www.suse.com/security/cve/CVE-2023-4582
- https://www.suse.com/security/cve/CVE-2023-4583
- https://www.suse.com/security/cve/CVE-2023-4584
- https://www.suse.com/security/cve/CVE-2023-4585
- https://osv.dev/vulnerability/SUSE-SU-2023:3519-1