SUSE-SU-2023:3519-1: Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606). CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688) CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback (bmo#1846689) CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694) CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397) CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884) CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007) CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079) CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046) CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758) CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874) CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030) CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529) CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/MozillaFirefox-branding-upstreamto a version that resolves this vulnerability.Fixed in 115.2.0-150200.152.102.1 - Upgrade
Upgrade
suse/MozillaFirefoxto a version that resolves this vulnerability.Fixed in 115.2.0-150200.152.102.1 - Upgrade
Upgrade
suse/MozillaFirefox-translations-otherto a version that resolves this vulnerability.Fixed in 115.2.0-150200.152.102.1 - Upgrade
Upgrade
suse/MozillaFirefox-translations-commonto a version that resolves this vulnerability.Fixed in 115.2.0-150200.152.102.1 - Upgrade
Upgrade
suse/MozillaFirefox-debugsourceto a version that resolves this vulnerability.Fixed in 115.2.0-150200.152.102.1 - Upgrade
Upgrade
suse/MozillaFirefox-debuginfoto a version that resolves this vulnerability.Fixed in 115.2.0-150200.152.102.1 - Upgrade
Upgrade
suse/MozillaFirefox-develto a version that resolves this vulnerability.Fixed in 115.2.0-150200.152.102.1 - Upgrade
Upgrade
MozillaFirefoxto a version that resolves this vulnerability.Fixed in 115.2.0 ESRPatch MFSA 2023-36
Event History
Child vulnerabilities
Contains the following vulnerabilities.