Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2023:3519-1

UNKNOWN

Security update for MozillaFirefox

Published Sep 5, 2023

Modified 2 years ago

Fix available

Details

This update for MozillaFirefox fixes the following issues:

Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606).

CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688)
CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback (bmo#1846689)
CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694)
CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397)
CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884)
CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007)
CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079)
CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046)
CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758)
CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874)
CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030)
CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).

Affected Packages

SUSE:Enterprise Storage 7MozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Enterprise Storage 7MozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Enterprise Storage 7MozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Enterprise Storage 7MozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

SUSE:Enterprise Storage 7.1MozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Enterprise Storage 7.1MozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Enterprise Storage 7.1MozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Enterprise Storage 7.1MozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSMozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSMozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSMozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSMozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSMozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSMozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSMozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSMozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP4MozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP4MozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP4MozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP4MozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP5MozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP5MozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP5MozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP5MozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server 15 SP2-LTSSMozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server 15 SP2-LTSSMozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server 15 SP2-LTSSMozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server 15 SP2-LTSSMozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server 15 SP3-LTSSMozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2MozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2MozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2MozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2MozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

openSUSE:Leap 15.4MozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

openSUSE:Leap 15.4MozillaFirefox-branding-upstream

Fixed in:

115.2.0-150200.152.102.1

openSUSE:Leap 15.4MozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

openSUSE:Leap 15.4MozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

openSUSE:Leap 15.4MozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

openSUSE:Leap 15.5MozillaFirefox

Fixed in:

115.2.0-150200.152.102.1

openSUSE:Leap 15.5MozillaFirefox-branding-upstream

Fixed in:

115.2.0-150200.152.102.1

openSUSE:Leap 15.5MozillaFirefox-devel

Fixed in:

115.2.0-150200.152.102.1

openSUSE:Leap 15.5MozillaFirefox-translations-common

Fixed in:

115.2.0-150200.152.102.1

openSUSE:Leap 15.5MozillaFirefox-translations-other

Fixed in:

115.2.0-150200.152.102.1

References

REPORThttps://bugzilla.suse.com/1214606 WEBhttps://www.suse.com/security/cve/CVE-2023-4051 WEBhttps://www.suse.com/security/cve/CVE-2023-4053 WEBhttps://www.suse.com/security/cve/CVE-2023-4574 WEBhttps://www.suse.com/security/cve/CVE-2023-4575 WEBhttps://www.suse.com/security/cve/CVE-2023-4576 WEBhttps://www.suse.com/security/cve/CVE-2023-4577 WEBhttps://www.suse.com/security/cve/CVE-2023-4578 WEBhttps://www.suse.com/security/cve/CVE-2023-4580 WEBhttps://www.suse.com/security/cve/CVE-2023-4581 WEBhttps://www.suse.com/security/cve/CVE-2023-4582 WEBhttps://www.suse.com/security/cve/CVE-2023-4583 WEBhttps://www.suse.com/security/cve/CVE-2023-4584 WEBhttps://www.suse.com/security/cve/CVE-2023-4585 ADVISORYhttps://www.suse.com/support/update/announcement/2023/suse-su-20233519-1/

Upstream

CVE-2023-4051 CVE-2023-4053 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576 CVE-2023-4577 CVE-2023-4578 CVE-2023-4580 CVE-2023-4581 CVE-2023-4582 CVE-2023-4583 CVE-2023-4584 CVE-2023-4585

Related

CVE-2023-4051 CVE-2023-4053 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576 CVE-2023-4577 CVE-2023-4578 CVE-2023-4580 CVE-2023-4581 CVE-2023-4582 CVE-2023-4583 CVE-2023-4584 CVE-2023-4585

Ecosystems

SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 openSUSE Leap 15.4 openSUSE Leap 15.5

Timeline

PublishedSep 5, 2023

ModifiedSep 5, 2023

SUSE-SU-2023:3519-1 | Mondoo Vulnerability Intelligence