Mozilla Firefox: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• Critical 9.8
  CVE-2023-34417

  Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that …

  Mozilla Firefox firefox Browsers Ubuntu
  Jun 19, 2023
• Unscored —
  CVE-2023-34414

  The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 19, 2023
• Unscored —
  CVE-2023-34415

  When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox…

  Mozilla Firefox firefox Browsers Ubuntu
  Jun 19, 2023
• Unscored —
  CVE-2023-34416

  Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed eviden…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 19, 2023

Revision history

1. 2024-01-07 #9

   Neue Updates von Gentoo aufgenommen

2. 2023-09-27 #8

   Neue Updates von Amazon aufgenommen

3. 2023-06-20 #7

   Neue Updates von Ubuntu aufgenommen

4. 2023-06-18 #6

   Neue Updates von Oracle Linux aufgenommen

5. 2023-06-14 #5

   Neue Updates von Red Hat und Oracle Linux aufgenommen

6. 2023-06-13 #4

   Neue Updates von Red Hat aufgenommen

7. 2023-06-12 #3

   Neue Updates von Ubuntu und SUSE aufgenommen

8. 2023-06-08 #2

   Neue Updates von SUSE, Ubuntu und Debian aufgenommen

9. 2023-06-06 #1

   Initiale Fassung

References

• Mozilla Foundation Security Advisory vom 2023-06-06
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-19/
• Mozilla Foundation Security Advisory vom 2023-06-06
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-20/
• SUSE Security Update SUSE-SU-2023:2440-1 vom 2023-06-07
  https://lists.suse.com/pipermail/sle-security-updates/2023-June/015113.html
• Ubuntu Security Notice USN-6147-1 vom 2023-06-08
  https://ubuntu.com/security/notices/USN-6147-1
• Debian Security Advisory DSA-5421 vom 2023-06-07
  https://lists.debian.org/debian-security-announce/2023/msg00112.html
• Debian Security Advisory DLA-3448 vom 2023-06-08
  https://lists.debian.org/debian-lts-announce/2023/06/msg00010.html
• SUSE Security Update SUSE-SU-2023:2441-1 vom 2023-06-07
  https://lists.suse.com/pipermail/sle-security-updates/2023-June/015112.html
• Ubuntu Security Notice USN-6143-2 vom 2023-06-13
  https://ubuntu.com/security/notices/USN-6143-2
• SUSE Security Update SUSE-SU-2023:2489-1 vom 2023-06-12
  https://lists.suse.com/pipermail/sle-security-updates/2023-June/015139.html
• Red Hat Security Advisory RHSA-2023:3561 vom 2023-06-14
  https://access.redhat.com/errata/RHSA-2023:3561
• Red Hat Security Advisory RHSA-2023:3562 vom 2023-06-14
  https://access.redhat.com/errata/RHSA-2023:3562
• Red Hat Security Advisory RHSA-2023:3560 vom 2023-06-14
  https://access.redhat.com/errata/RHSA-2023:3560
• Red Hat Security Advisory RHSA-2023:3597 vom 2023-06-14
  https://access.redhat.com/errata/RHSA-2023:3597
• Red Hat Security Advisory RHSA-2023:3578 vom 2023-06-14
  https://access.redhat.com/errata/RHSA-2023:3578
• Red Hat Security Advisory RHSA-2023:3579 vom 2023-06-14
  https://access.redhat.com/errata/RHSA-2023:3579
• Red Hat Security Advisory RHSA-2023:3589 vom 2023-06-14
  https://access.redhat.com/errata/RHSA-2023:3589
• Oracle Linux Security Advisory ELSA-2023-3590 vom 2023-06-15
  https://linux.oracle.com/errata/ELSA-2023-3590.html
• Red Hat Security Advisory RHSA-2023:3590 vom 2023-06-14
  https://access.redhat.com/errata/RHSA-2023:3590
• Oracle Linux Security Advisory ELSA-2023-3579 vom 2023-06-14
  https://linux.oracle.com/errata/ELSA-2023-3579.html
• Oracle Linux Security Advisory ELSA-2023-3589 vom 2023-06-17
  https://linux.oracle.com/errata/ELSA-2023-3589.html
• Ubuntu Security Notice USN-6143-3 vom 2023-06-21
  https://ubuntu.com/security/notices/USN-6143-3
• Amazon Linux Security Advisory ALASFIREFOX-2023-003 vom 2023-09-27
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-003.html
• Gentoo Linux Security Advisory GLSA-202401-10 vom 2024-01-07
  https://security.gentoo.org/glsa/202401-10