ELSA-2023-5197 — Important: firefox security update (Oracle Linux 7)

Summary

[102.15.1-1.0.1]
- Remove upstream references [Orabug: 30143292]
- Update distribution for Oracle Linux [Orabug: 30143292]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[102.15.1-1]
- Update to 102.15.1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:102.15.1-1.0.1.el7_9

Vulnerabilities 1

High 8.8

CVE-2023-4863 Exploited Public exploit EPSS 100%

libwebp: OOB write in BuildHuffmanTable

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi npm PyPI Go crates.io NuGet

Sep 12, 2023
KEV Sep 13, 2023

Important: firefox security update (Oracle Linux 7)

Summary

Fixed packages 1

Vulnerabilities 1

libwebp: OOB write in BuildHuffmanTable