FlawAtlas
Search the atlas
SUSE-SU-2023:3519-1 Not scored

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606). - CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688) - CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback (bmo#1846689) - CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694) - CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397) - CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884) - CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007) - CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079) - CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046) - CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758) - CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874) - CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030) - CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529) - CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).

Exploit probability Not scored
Published September 5, 2023
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 7 MozillaFirefox
SUSE:Enterprise Storage 7.1 MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-LTSS MozillaFirefox
SUSE:Linux Enterprise Server 15 SP3-LTSS MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 MozillaFirefox
openSUSE:Leap 15.4 MozillaFirefox
openSUSE:Leap 15.5 MozillaFirefox

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:3519-1

This update for MozillaFirefox fixes the following issues: Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606). - CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688) - CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback (bmo#1846689) - CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694) - CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397) - CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884) - CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007) - CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079) - CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046) - CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758) - CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874) - CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030) - CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529) - CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).

View original source

05 / REFERENCES

Further evidence