File _patchinfo of Package patchinfo.30382

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.30382

<patchinfo incident="30382">
  <issue tracker="bnc" id="1214606">VUL-0: MozillaFirefox / MozillaThunderbird: update to 117 and 115.2esr</issue>
  <issue tracker="bnc" id="1213746">VUL-0: MozillaFirefox / MozillaThunderbird: update to 116 and 115.1esr</issue>
	<issue tracker="cve" id="2023-4582"/>
	<issue tracker="cve" id="2023-4575"/>
	<issue tracker="cve" id="2023-4051"/>
	<issue tracker="cve" id="2023-4584"/>
	<issue tracker="cve" id="2023-4583"/>
	<issue tracker="cve" id="2023-4581"/>
	<issue tracker="cve" id="2023-4578"/>
	<issue tracker="cve" id="2023-4577"/>
	<issue tracker="cve" id="2023-4053"/>
	<issue tracker="cve" id="2023-4576"/>
	<issue tracker="cve" id="2023-4580"/>
	<issue tracker="cve" id="2023-4574"/>
	<issue tracker="cve" id="2023-4585"/>
  <packager>MSirringhaus</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for MozillaFirefox</summary>
  <description>This update for MozillaFirefox fixes the following issues:

Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606).

- CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688)
- CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback  (bmo#1846689)
- CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694)
- CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397)
- CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884)
- CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007)
- CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079)
- CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046)
- CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758)
- CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874)
- CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030)
- CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2  (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
- CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.30382

Places