Red Hat Security Advisory: firefox security update

Fixed packages 3

Vulnerabilities 7

• High 8.8
  CVE-2023-32207

  A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permis…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32205

  In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to pot…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32206

  An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Fir…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32211

  A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ES…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32212

  An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox <…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32213

  When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 11…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32215

  Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCr…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196736
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196737
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196738
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196740
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196741
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196742
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196753
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3138.json
• report
  https://access.redhat.com/security/cve/CVE-2023-32205
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32205
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32205
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-17/#CVE-2023-32205
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-18/#CVE-2023-32205
• report
  https://access.redhat.com/security/cve/CVE-2023-32206
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32206
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32206
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-17/#CVE-2023-32206
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-18/#CVE-2023-32206
• report
  https://access.redhat.com/security/cve/CVE-2023-32207
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32207
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32207
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-17/#CVE-2023-32207
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-18/#CVE-2023-32207
• report
  https://access.redhat.com/security/cve/CVE-2023-32211
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32211
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32211
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-17/#CVE-2023-32211
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-18/#CVE-2023-32211
• report
  https://access.redhat.com/security/cve/CVE-2023-32212
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32212
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32212
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-17/#CVE-2023-32212
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-18/#CVE-2023-32212
• report
  https://access.redhat.com/security/cve/CVE-2023-32213
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32213
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32213
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-17/#CVE-2023-32213
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-18/#CVE-2023-32213