SUSE-SU-2023:4929-1: Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.6.0 ESR changelog-entry (bsc#1217974) CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver (bmo#1843782). CVE-2023-6857: Symlinks may resolve to smaller than expected buffers (bmo#1796023). CVE-2023-6858: Heap buffer overflow in nsTextFragment (bmo#1826791). CVE-2023-6859: Use-after-free in PRGetIdentitiesLayer (bmo#1840144). CVE-2023-6860: Potential sandbox escape due to VideoBridge lack of texture validation (bmo#1854669). CVE-2023-6861: Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode (bmo#1864118). CVE-2023-6862: Use-after-free in nsDNSService (bsc#1868042). CVE-2023-6863: Undefined behavior in ShutdownObserver() (bmo#1868901). CVE-2023-6864: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. CVE-2023-6865: Potential exposure of uninitialized data in EncryptingOutputStream (bmo#1864123). CVE-2023-6867: Clickjacking permission prompts using the popup transition (bmo#1863863). Fixed: Various security fixes and other quality improvements MFSA 2023-50 (bsc#1217230) CVE-2023-6204 (bmo#1841050) Out-of-bound memory access in WebGL2 blitFramebuffer CVE-2023-6205 (bmo#1854076) Use-after-free in MessagePort::Entangled CVE-2023-6206 (bmo#1857430) Clickjacking permission prompts using the fullscreen transition CVE-2023-6207 (bmo#1861344) Use-after-free in ReadableByteStreamQueueEntry::Buffer CVE-2023-6208 (bmo#1855345) Using Selection API would copy contents into X11 primary selection. CVE-2023-6209 (bmo#1858570) Incorrect parsing of relative URLs starting with "///" CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252, bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943, bmo#1862782) Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/MozillaFirefox-translations-commonto a version that resolves this vulnerability.Fixed in 115.6.0-150000.150.119.1 - Upgrade
Upgrade
suse/MozillaFirefox-debuginfoto a version that resolves this vulnerability.Fixed in 115.6.0-150000.150.119.1 - Upgrade
Upgrade
suse/MozillaFirefox-translations-otherto a version that resolves this vulnerability.Fixed in 115.6.0-150000.150.119.1 - Upgrade
Upgrade
suse/MozillaFirefox-debugsourceto a version that resolves this vulnerability.Fixed in 115.6.0-150000.150.119.1 - Upgrade
Upgrade
suse/MozillaFirefoxto a version that resolves this vulnerability.Fixed in 115.6.0-150000.150.119.1 - Upgrade
Upgrade
suse/MozillaFirefox-develto a version that resolves this vulnerability.Fixed in 115.6.0-150000.150.119.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4929=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4929=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4929=1 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 121 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.6 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 115.6
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which deployments are covered by this update?
The update applies to MozillaFirefox packages, including the main browser package, translations, development files, debug packages, and debug source, on SUSE CaaS Platform 4.0 for x86_64 and noarch.
What types of security impact are addressed?
The update fixes multiple memory-safety issues, including heap buffer overflows and use-after-free flaws. It also addresses a potential sandbox escape involving VideoBridge texture validation, clickjacking of permission prompts, and potential exposure of uninitialized data.
Are headless Firefox deployments affected by any of the listed issues?
Yes. CVE-2023-6861 is a heap buffer overflow in nsWindow::PickerOpen(void) that affects Firefox in headless mode.
What Firefox ESR release includes the listed fixes?
The advisory identifies Firefox Extended Support Release 115.6.0 ESR as containing these fixes.