p PatchFirst

SUSE-SU-2023:1817-1

SUSE-SU-2023:1817-1 · Security update for MozillaFirefox

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 102.10.0 ESR (bsc#1210212) - CVE-2023-29531: Out-of-bound memory access in WebGL on macOS - CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass - CVE-2023-29533: Fullscreen notification obscured - MFSA-TMP-2023-0001: Double-free in libwebp - CVE-2023-29535: Potential Memory Corruption following Garbage Collector compaction - CVE-2023-29536: Invalid free from JavaScript code - CVE-2023-29539: Content-Disposition filename truncation leads to Reflected File Download - CVE-2023-29541: Files with malicious extensions could have been downloaded unsafely on Linux - CVE-2023-29542: Bypass of file download extension restrictions - CVE-2023-29545: Windows Save As dialog resolved environment variables - CVE-2023-1945: Memory Corruption in Safe Browsing Code - CVE-2023-29548: Incorrect optimization result on ARM64 - CVE-2023-29550: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10

Fix available

Published
Updated

Stack: system

Affected products and versions

  • mozillafirefox SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS

    Affected ranges
    • ECOSYSTEM: < 102.10.0-150000.150.82.1

    Update to 102.10.0-150000.150.82.1

  • mozillafirefox SUSE:Linux Enterprise Server 15 SP1-LTSS

    Affected ranges
    • ECOSYSTEM: < 102.10.0-150000.150.82.1

    Update to 102.10.0-150000.150.82.1

  • mozillafirefox SUSE:Linux Enterprise Server for SAP Applications 15 SP1

    Affected ranges
    • ECOSYSTEM: < 102.10.0-150000.150.82.1

    Update to 102.10.0-150000.150.82.1

Original sources

Check your server →