Summary
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.10.0 ESR.
Security Fix(es):
* MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)
* Mozilla: Fullscreen notification obscured (CVE-2023-29533)
* Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535)
* Mozilla: Invalid free from JavaScript code (CVE-2023-29536)
* Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550)
* Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945)
* Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539)
* Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541)
* Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | firefox | 102.10.0-1.el8_7.alma |
Vulnerabilities 8
-
High 8.8
Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run att…
-
High 8.8
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruptio…
-
Medium 6.5
Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable c…
-
Medium 6.5
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affe…
-
Unscored —
A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscree…
-
Unscored —
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resu…
-
Unscored —
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, res…
-
Unscored —
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename…
References
-
report
https://access.redhat.com/security/cve/CVE-2023-1945
-
report
https://access.redhat.com/security/cve/CVE-2023-29533
-
report
https://access.redhat.com/security/cve/CVE-2023-29535
-
report
https://access.redhat.com/security/cve/CVE-2023-29536
-
report
https://access.redhat.com/security/cve/CVE-2023-29539
-
report
https://access.redhat.com/security/cve/CVE-2023-29541
-
report
https://access.redhat.com/security/cve/CVE-2023-29548
-
report
https://access.redhat.com/security/cve/CVE-2023-29550
-
report
https://bugzilla.redhat.com/2186101
-
report
https://bugzilla.redhat.com/2186103
-
report
https://bugzilla.redhat.com/2186104
-
report
https://bugzilla.redhat.com/2186105
-
report
https://bugzilla.redhat.com/2186106
-
report
https://bugzilla.redhat.com/2186109
-
report
https://bugzilla.redhat.com/2186110
-
report
https://bugzilla.redhat.com/2186111
-
advisory
https://errata.almalinux.org/8/ALSA-2023-1787.html