Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2023-25732
Vulnerability from cvelistv5
Published
2023-06-02 00:00
Modified
2025-01-09 21:12
Severity ?
EPSS score ?
0.56%
(0.65518)
Summary
When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| security@mozilla.org | https://bugzilla.mozilla.org/show_bug.cgi?id=1804564 | Issue Tracking, Permissions Required | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2023-06/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2023-07/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.mozilla.org/show_bug.cgi?id=1804564 | Issue Tracking, Permissions Required | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.mozilla.org/security/advisories/mfsa2023-06/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.mozilla.org/security/advisories/mfsa2023-07/ | Vendor Advisory | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://bugzilla.mozilla.org/show_bug.cgi?id=1804564 | Issue Tracking, Permissions Required |
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Mozilla | Firefox |
Version: unspecified < 110 |
|||||||||||
|
||||||||||||||
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T11:32:11.641Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-06/", }, { tags: [ "x_transferred", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-05/", }, { tags: [ "x_transferred", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-07/", }, { tags: [ "x_transferred", ], url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", }, ], title: "CVE Program Container", }, { metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, }, { other: { content: { id: "CVE-2023-25732", options: [ { Exploitation: "poc", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2025-01-09T21:12:13.827414Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-787", description: "CWE-787 Out-of-bounds Write", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2025-01-09T21:12:17.935Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, references: [ { tags: [ "exploit", ], url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", }, ], title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "Firefox", vendor: "Mozilla", versions: [ { lessThan: "110", status: "affected", version: "unspecified", versionType: "custom", }, ], }, { product: "Thunderbird", vendor: "Mozilla", versions: [ { lessThan: "102.8", status: "affected", version: "unspecified", versionType: "custom", }, ], }, { product: "Firefox ESR", vendor: "Mozilla", versions: [ { lessThan: "102.8", status: "affected", version: "unspecified", versionType: "custom", }, ], }, ], descriptions: [ { lang: "en", value: "When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.", }, ], problemTypes: [ { descriptions: [ { description: "Out of bounds memory write from EncodeInputStream", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-06-02T00:00:00", orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe", shortName: "mozilla", }, references: [ { url: "https://www.mozilla.org/security/advisories/mfsa2023-06/", }, { url: "https://www.mozilla.org/security/advisories/mfsa2023-05/", }, { url: "https://www.mozilla.org/security/advisories/mfsa2023-07/", }, { url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", }, ], }, }, cveMetadata: { assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe", assignerShortName: "mozilla", cveId: "CVE-2023-25732", datePublished: "2023-06-02T00:00:00", dateReserved: "2023-02-13T00:00:00", dateUpdated: "2025-01-09T21:12:17.935Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2023-25732\",\"sourceIdentifier\":\"security@mozilla.org\",\"published\":\"2023-06-02T17:15:11.193\",\"lastModified\":\"2025-01-09T21:15:21.253\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"110.0\",\"matchCriteriaId\":\"811EBB2F-0FAA-49DB-8B16-99341814C3D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"102.8\",\"matchCriteriaId\":\"731649BC-CBBC-4423-93E1-577EF7A17DBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"102.8\",\"matchCriteriaId\":\"E7ED1B02-7653-4441-B4F4-980A86C4F170\"}]}]}],\"references\":[{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1804564\",\"source\":\"security@mozilla.org\",\"tags\":[\"Issue Tracking\",\"Permissions Required\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-05/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-06/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-07/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1804564\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Permissions Required\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-05/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-06/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2023-07/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1804564\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Issue Tracking\",\"Permissions Required\"]}]}}", vulnrichment: { containers: "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-06/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-05/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-07/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1804564\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T11:32:11.641Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-25732\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-01-09T21:12:13.827414Z\"}}}], \"references\": [{\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1804564\", \"tags\": [\"exploit\"]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787 Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-01-09T21:07:56.622Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Mozilla\", \"product\": \"Firefox\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"110\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Mozilla\", \"product\": \"Thunderbird\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"102.8\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Mozilla\", \"product\": \"Firefox ESR\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"102.8\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-06/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-05/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2023-07/\"}, {\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1804564\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"Out of bounds memory write from EncodeInputStream\"}]}], \"providerMetadata\": {\"orgId\": \"f16b083a-5664-49f3-a51e-8d479e5ed7fe\", \"shortName\": \"mozilla\", \"dateUpdated\": \"2023-06-02T00:00:00\"}}}", cveMetadata: "{\"cveId\": \"CVE-2023-25732\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-01-09T21:12:17.935Z\", \"dateReserved\": \"2023-02-13T00:00:00\", \"assignerOrgId\": \"f16b083a-5664-49f3-a51e-8d479e5ed7fe\", \"datePublished\": \"2023-06-02T00:00:00\", \"assignerShortName\": \"mozilla\"}", dataType: "CVE_RECORD", dataVersion: "5.1", }, }, }
RHSA-2023:0824
Vulnerability from csaf_redhat
Published
2023-02-20 12:20
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0824", url: "https://access.redhat.com/errata/RHSA-2023:0824", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0824.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:02:22+00:00", generator: { date: "2025-01-13T01:02:22+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0824", initial_release_date: "2023-02-20T12:20:46+00:00", revision_history: [ { date: "2023-02-20T12:20:46+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:18:41+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:22+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 9)", product: { name: "Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:9::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.src", product: { name: "thunderbird-0:102.8.0-2.el9_1.src", product_id: "thunderbird-0:102.8.0-2.el9_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.aarch64", product: { name: "thunderbird-0:102.8.0-2.el9_1.aarch64", product_id: "thunderbird-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el9_1.ppc64le", product_id: "thunderbird-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.x86_64", product: { name: "thunderbird-0:102.8.0-2.el9_1.x86_64", product_id: "thunderbird-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.s390x", product: { name: "thunderbird-0:102.8.0-2.el9_1.s390x", product_id: "thunderbird-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.src", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0810
Vulnerability from csaf_redhat
Published
2023-02-20 08:27
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0810", url: "https://access.redhat.com/errata/RHSA-2023:0810", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0810.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:01:41+00:00", generator: { date: "2025-01-13T01:01:41+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0810", initial_release_date: "2023-02-20T08:27:23+00:00", revision_history: [ { date: "2023-02-20T08:27:23+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T14:11:21+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:41+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 9)", product: { name: "Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:9::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.src", product: { name: "firefox-0:102.8.0-2.el9_1.src", product_id: "firefox-0:102.8.0-2.el9_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-x11-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-x11-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-x11-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-x11-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-0:102.8.0-2.el9_1.s390x", product_id: "firefox-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-x11-0:102.8.0-2.el9_1.s390x", product_id: "firefox-x11-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", }, product_reference: "firefox-0:102.8.0-2.el9_1.src", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0821
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2024-11-22 22:08
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0821", url: "https://access.redhat.com/errata/RHSA-2023:0821", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0821.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2024-11-22T22:08:43+00:00", generator: { date: "2024-11-22T22:08:43+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0821", initial_release_date: "2023-02-20T12:21:25+00:00", revision_history: [ { date: "2023-02-20T12:21:25+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:33:59+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:08:43+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 8)", product: { name: "Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:8::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.src", product: { name: "thunderbird-0:102.8.0-2.el8_7.src", product_id: "thunderbird-0:102.8.0-2.el8_7.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.aarch64", product: { name: "thunderbird-0:102.8.0-2.el8_7.aarch64", product_id: "thunderbird-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_7.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_7.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.s390x", product: { name: "thunderbird-0:102.8.0-2.el8_7.s390x", product_id: "thunderbird-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.src", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0821
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0821", url: "https://access.redhat.com/errata/RHSA-2023:0821", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0821.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:02:11+00:00", generator: { date: "2025-01-13T01:02:11+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0821", initial_release_date: "2023-02-20T12:21:25+00:00", revision_history: [ { date: "2023-02-20T12:21:25+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:33:59+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:11+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 8)", product: { name: "Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:8::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.src", product: { name: "thunderbird-0:102.8.0-2.el8_7.src", product_id: "thunderbird-0:102.8.0-2.el8_7.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.aarch64", product: { name: "thunderbird-0:102.8.0-2.el8_7.aarch64", product_id: "thunderbird-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_7.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_7.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.s390x", product: { name: "thunderbird-0:102.8.0-2.el8_7.s390x", product_id: "thunderbird-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.src", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0819
Vulnerability from csaf_redhat
Published
2023-02-20 12:15
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0819", url: "https://access.redhat.com/errata/RHSA-2023:0819", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0819.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:02:00+00:00", generator: { date: "2025-01-13T01:02:00+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0819", initial_release_date: "2023-02-20T12:15:40+00:00", revision_history: [ { date: "2023-02-20T12:15:40+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T10:42:30+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:00+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_aus:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_tus:8.2::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_2.src", product: { name: "thunderbird-0:102.8.0-2.el8_2.src", product_id: "thunderbird-0:102.8.0-2.el8_2.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_2.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_2.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_2.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_2?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0808
Vulnerability from csaf_redhat
Published
2023-02-20 08:31
Modified
2024-11-22 22:05
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0808", url: "https://access.redhat.com/errata/RHSA-2023:0808", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0808.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2024-11-22T22:05:59+00:00", generator: { date: "2024-11-22T22:05:59+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0808", initial_release_date: "2023-02-20T08:31:14+00:00", revision_history: [ { date: "2023-02-20T08:31:14+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:14:41+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:05:59+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 8)", product: { name: "Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:8::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.src", product: { name: "firefox-0:102.8.0-2.el8_7.src", product_id: "firefox-0:102.8.0-2.el8_7.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.aarch64", product: { name: "firefox-0:102.8.0-2.el8_7.aarch64", product_id: "firefox-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_7.ppc64le", product_id: "firefox-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.x86_64", product: { name: "firefox-0:102.8.0-2.el8_7.x86_64", product_id: "firefox-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.s390x", product: { name: "firefox-0:102.8.0-2.el8_7.s390x", product_id: "firefox-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", }, product_reference: "firefox-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", }, product_reference: "firefox-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", }, product_reference: "firefox-0:102.8.0-2.el8_7.src", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0805
Vulnerability from csaf_redhat
Published
2023-02-20 08:23
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0805", url: "https://access.redhat.com/errata/RHSA-2023:0805", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0805.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:02:01+00:00", generator: { date: "2025-01-13T01:02:01+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0805", initial_release_date: "2023-02-20T08:23:14+00:00", revision_history: [ { date: "2023-02-20T08:23:14+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:28:00+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:01+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.4::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.src", product: { name: "firefox-0:102.8.0-2.el8_4.src", product_id: "firefox-0:102.8.0-2.el8_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.aarch64", product: { name: "firefox-0:102.8.0-2.el8_4.aarch64", product_id: "firefox-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_4.ppc64le", product_id: "firefox-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.x86_64", product: { name: "firefox-0:102.8.0-2.el8_4.x86_64", product_id: "firefox-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.s390x", product: { name: "firefox-0:102.8.0-2.el8_4.s390x", product_id: "firefox-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", }, product_reference: "firefox-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", }, product_reference: "firefox-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", }, product_reference: "firefox-0:102.8.0-2.el8_4.src", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0805
Vulnerability from csaf_redhat
Published
2023-02-20 08:23
Modified
2024-11-22 22:06
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0805", url: "https://access.redhat.com/errata/RHSA-2023:0805", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0805.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2024-11-22T22:06:08+00:00", generator: { date: "2024-11-22T22:06:08+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0805", initial_release_date: "2023-02-20T08:23:14+00:00", revision_history: [ { date: "2023-02-20T08:23:14+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:28:00+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:06:08+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.4::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.src", product: { name: "firefox-0:102.8.0-2.el8_4.src", product_id: "firefox-0:102.8.0-2.el8_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.aarch64", product: { name: "firefox-0:102.8.0-2.el8_4.aarch64", product_id: "firefox-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_4.ppc64le", product_id: "firefox-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.x86_64", product: { name: "firefox-0:102.8.0-2.el8_4.x86_64", product_id: "firefox-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.s390x", product: { name: "firefox-0:102.8.0-2.el8_4.s390x", product_id: "firefox-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", }, product_reference: "firefox-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", }, product_reference: "firefox-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", }, product_reference: "firefox-0:102.8.0-2.el8_4.src", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0823
Vulnerability from csaf_redhat
Published
2023-02-20 12:20
Modified
2024-11-22 22:08
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0823", url: "https://access.redhat.com/errata/RHSA-2023:0823", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0823.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2024-11-22T22:08:24+00:00", generator: { date: "2024-11-22T22:08:24+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0823", initial_release_date: "2023-02-20T12:20:55+00:00", revision_history: [ { date: "2023-02-20T12:20:55+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:30:46+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:08:24+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:9.0::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.src", product: { name: "thunderbird-0:102.8.0-2.el9_0.src", product_id: "thunderbird-0:102.8.0-2.el9_0.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.aarch64", product: { name: "thunderbird-0:102.8.0-2.el9_0.aarch64", product_id: "thunderbird-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el9_0.ppc64le", product_id: "thunderbird-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.x86_64", product: { name: "thunderbird-0:102.8.0-2.el9_0.x86_64", product_id: "thunderbird-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.s390x", product: { name: "thunderbird-0:102.8.0-2.el9_0.s390x", product_id: "thunderbird-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.src", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0808
Vulnerability from csaf_redhat
Published
2023-02-20 08:31
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0808", url: "https://access.redhat.com/errata/RHSA-2023:0808", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0808.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:01:51+00:00", generator: { date: "2025-01-13T01:01:51+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0808", initial_release_date: "2023-02-20T08:31:14+00:00", revision_history: [ { date: "2023-02-20T08:31:14+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:14:41+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:51+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 8)", product: { name: "Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:8::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.src", product: { name: "firefox-0:102.8.0-2.el8_7.src", product_id: "firefox-0:102.8.0-2.el8_7.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.aarch64", product: { name: "firefox-0:102.8.0-2.el8_7.aarch64", product_id: "firefox-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_7.ppc64le", product_id: "firefox-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.x86_64", product: { name: "firefox-0:102.8.0-2.el8_7.x86_64", product_id: "firefox-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.s390x", product: { name: "firefox-0:102.8.0-2.el8_7.s390x", product_id: "firefox-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", }, product_reference: "firefox-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", }, product_reference: "firefox-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", }, product_reference: "firefox-0:102.8.0-2.el8_7.src", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0824
Vulnerability from csaf_redhat
Published
2023-02-20 12:20
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0824", url: "https://access.redhat.com/errata/RHSA-2023:0824", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0824.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:02:22+00:00", generator: { date: "2025-01-13T01:02:22+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0824", initial_release_date: "2023-02-20T12:20:46+00:00", revision_history: [ { date: "2023-02-20T12:20:46+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:18:41+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:22+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 9)", product: { name: "Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:9::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.src", product: { name: "thunderbird-0:102.8.0-2.el9_1.src", product_id: "thunderbird-0:102.8.0-2.el9_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.aarch64", product: { name: "thunderbird-0:102.8.0-2.el9_1.aarch64", product_id: "thunderbird-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el9_1.ppc64le", product_id: "thunderbird-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.x86_64", product: { name: "thunderbird-0:102.8.0-2.el9_1.x86_64", product_id: "thunderbird-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.s390x", product: { name: "thunderbird-0:102.8.0-2.el9_1.s390x", product_id: "thunderbird-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.src", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0817
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0817", url: "https://access.redhat.com/errata/RHSA-2023:0817", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0817.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:02:30+00:00", generator: { date: "2025-01-13T01:02:30+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0817", initial_release_date: "2023-02-20T12:21:18+00:00", revision_history: [ { date: "2023-02-20T12:21:18+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T10:52:45+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:30+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el7_9.src", product: { name: "thunderbird-0:102.8.0-2.el7_9.src", product_id: "thunderbird-0:102.8.0-2.el7_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el7_9?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el7_9.x86_64", product: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64", product_id: "thunderbird-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el7_9?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el7_9?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el7_9.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le", product_id: "thunderbird-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el7_9?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el7_9?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0817
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0817", url: "https://access.redhat.com/errata/RHSA-2023:0817", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0817.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:02:30+00:00", generator: { date: "2025-01-13T01:02:30+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0817", initial_release_date: "2023-02-20T12:21:18+00:00", revision_history: [ { date: "2023-02-20T12:21:18+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T10:52:45+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:30+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el7_9.src", product: { name: "thunderbird-0:102.8.0-2.el7_9.src", product_id: "thunderbird-0:102.8.0-2.el7_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el7_9?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el7_9.x86_64", product: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64", product_id: "thunderbird-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el7_9?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el7_9?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el7_9.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le", product_id: "thunderbird-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el7_9?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el7_9?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0807
Vulnerability from csaf_redhat
Published
2023-02-20 08:30
Modified
2024-11-22 22:05
Summary
Red Hat Security Advisory: Mozilla Firefox security update
Notes
Topic
An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0807", url: "https://access.redhat.com/errata/RHSA-2023:0807", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0807.json", }, ], title: "Red Hat Security Advisory: Mozilla Firefox security update", tracking: { current_release_date: "2024-11-22T22:05:30+00:00", generator: { date: "2024-11-22T22:05:30+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0807", initial_release_date: "2023-02-20T08:30:10+00:00", revision_history: [ { date: "2023-02-20T08:30:10+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-09T18:22:08+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:05:30+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.6::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.src", product: { name: "firefox-0:102.8.0-2.el8_6.src", product_id: "firefox-0:102.8.0-2.el8_6.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.aarch64", product: { name: "firefox-0:102.8.0-2.el8_6.aarch64", product_id: "firefox-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_6.ppc64le", product_id: "firefox-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.x86_64", product: { name: "firefox-0:102.8.0-2.el8_6.x86_64", product_id: "firefox-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.s390x", product: { name: "firefox-0:102.8.0-2.el8_6.s390x", product_id: "firefox-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", }, product_reference: "firefox-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", }, product_reference: "firefox-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", }, product_reference: "firefox-0:102.8.0-2.el8_6.src", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0820
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2024-11-22 22:07
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0820", url: "https://access.redhat.com/errata/RHSA-2023:0820", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0820.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2024-11-22T22:07:49+00:00", generator: { date: "2024-11-22T22:07:49+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0820", initial_release_date: "2023-02-20T12:21:56+00:00", revision_history: [ { date: "2023-02-20T12:21:56+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:34:14+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:07:49+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.4::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.src", product: { name: "thunderbird-0:102.8.0-2.el8_4.src", product_id: "thunderbird-0:102.8.0-2.el8_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.aarch64", product: { name: "thunderbird-0:102.8.0-2.el8_4.aarch64", product_id: "thunderbird-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_4.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_4.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.s390x", product: { name: "thunderbird-0:102.8.0-2.el8_4.s390x", product_id: "thunderbird-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.src", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0811
Vulnerability from csaf_redhat
Published
2023-02-20 08:29
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0811", url: "https://access.redhat.com/errata/RHSA-2023:0811", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0811.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:01:32+00:00", generator: { date: "2025-01-13T01:01:32+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0811", initial_release_date: "2023-02-20T08:29:30+00:00", revision_history: [ { date: "2023-02-20T08:29:30+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:12:10+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:32+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_aus:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_tus:8.2::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_2.src", product: { name: "firefox-0:102.8.0-2.el8_2.src", product_id: "firefox-0:102.8.0-2.el8_2.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_2.x86_64", product: { name: "firefox-0:102.8.0-2.el8_2.x86_64", product_id: "firefox-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_2.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_2.ppc64le", product_id: "firefox-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_2?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", }, product_reference: "firefox-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", }, product_reference: "firefox-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", }, product_reference: "firefox-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0817
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2024-11-22 22:08
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0817", url: "https://access.redhat.com/errata/RHSA-2023:0817", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0817.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2024-11-22T22:08:16+00:00", generator: { date: "2024-11-22T22:08:16+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0817", initial_release_date: "2023-02-20T12:21:18+00:00", revision_history: [ { date: "2023-02-20T12:21:18+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T10:52:45+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:08:16+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el7_9.src", product: { name: "thunderbird-0:102.8.0-2.el7_9.src", product_id: "thunderbird-0:102.8.0-2.el7_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el7_9?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el7_9.x86_64", product: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64", product_id: "thunderbird-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el7_9?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el7_9?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el7_9.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le", product_id: "thunderbird-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el7_9?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el7_9?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:18+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0817", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:thunderbird-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:thunderbird-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0811
Vulnerability from csaf_redhat
Published
2023-02-20 08:29
Modified
2024-11-22 22:05
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0811", url: "https://access.redhat.com/errata/RHSA-2023:0811", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0811.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2024-11-22T22:05:41+00:00", generator: { date: "2024-11-22T22:05:41+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0811", initial_release_date: "2023-02-20T08:29:30+00:00", revision_history: [ { date: "2023-02-20T08:29:30+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:12:10+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:05:41+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_aus:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_tus:8.2::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_2.src", product: { name: "firefox-0:102.8.0-2.el8_2.src", product_id: "firefox-0:102.8.0-2.el8_2.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_2.x86_64", product: { name: "firefox-0:102.8.0-2.el8_2.x86_64", product_id: "firefox-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_2.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_2.ppc64le", product_id: "firefox-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_2?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", }, product_reference: "firefox-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", }, product_reference: "firefox-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", }, product_reference: "firefox-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0822
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2024-11-22 22:07
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0822", url: "https://access.redhat.com/errata/RHSA-2023:0822", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0822.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2024-11-22T22:07:58+00:00", generator: { date: "2024-11-22T22:07:58+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0822", initial_release_date: "2023-02-20T12:21:27+00:00", revision_history: [ { date: "2023-02-20T12:21:27+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:33:07+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:07:58+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.6::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.src", product: { name: "thunderbird-0:102.8.0-2.el8_6.src", product_id: "thunderbird-0:102.8.0-2.el8_6.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.aarch64", product: { name: "thunderbird-0:102.8.0-2.el8_6.aarch64", product_id: "thunderbird-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_6.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_6.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.s390x", product: { name: "thunderbird-0:102.8.0-2.el8_6.s390x", product_id: "thunderbird-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.src", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0818
Vulnerability from csaf_redhat
Published
2023-02-20 12:14
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0818", url: "https://access.redhat.com/errata/RHSA-2023:0818", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0818.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:02:20+00:00", generator: { date: "2025-01-13T01:02:20+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0818", initial_release_date: "2023-02-20T12:14:45+00:00", revision_history: [ { date: "2023-02-20T12:14:45+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:02:00+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:20+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.1::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_1.src", product: { name: "thunderbird-0:102.8.0-2.el8_1.src", product_id: "thunderbird-0:102.8.0-2.el8_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_1.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_1.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_1.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_1.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_1.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_1.src", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0822
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0822", url: "https://access.redhat.com/errata/RHSA-2023:0822", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0822.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:01:38+00:00", generator: { date: "2025-01-13T01:01:38+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0822", initial_release_date: "2023-02-20T12:21:27+00:00", revision_history: [ { date: "2023-02-20T12:21:27+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:33:07+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:38+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.6::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.src", product: { name: "thunderbird-0:102.8.0-2.el8_6.src", product_id: "thunderbird-0:102.8.0-2.el8_6.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.aarch64", product: { name: "thunderbird-0:102.8.0-2.el8_6.aarch64", product_id: "thunderbird-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_6.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_6.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.s390x", product: { name: "thunderbird-0:102.8.0-2.el8_6.s390x", product_id: "thunderbird-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.src", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0805
Vulnerability from csaf_redhat
Published
2023-02-20 08:23
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0805", url: "https://access.redhat.com/errata/RHSA-2023:0805", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0805.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:02:01+00:00", generator: { date: "2025-01-13T01:02:01+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0805", initial_release_date: "2023-02-20T08:23:14+00:00", revision_history: [ { date: "2023-02-20T08:23:14+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:28:00+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:01+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.4::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.src", product: { name: "firefox-0:102.8.0-2.el8_4.src", product_id: "firefox-0:102.8.0-2.el8_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.aarch64", product: { name: "firefox-0:102.8.0-2.el8_4.aarch64", product_id: "firefox-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_4.ppc64le", product_id: "firefox-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.x86_64", product: { name: "firefox-0:102.8.0-2.el8_4.x86_64", product_id: "firefox-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_4.s390x", product: { name: "firefox-0:102.8.0-2.el8_4.s390x", product_id: "firefox-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_4?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", }, product_reference: "firefox-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", }, product_reference: "firefox-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", }, product_reference: "firefox-0:102.8.0-2.el8_4.src", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:23:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0805", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:firefox-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0819
Vulnerability from csaf_redhat
Published
2023-02-20 12:15
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0819", url: "https://access.redhat.com/errata/RHSA-2023:0819", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0819.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:02:00+00:00", generator: { date: "2025-01-13T01:02:00+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0819", initial_release_date: "2023-02-20T12:15:40+00:00", revision_history: [ { date: "2023-02-20T12:15:40+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T10:42:30+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:00+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_aus:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_tus:8.2::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_2.src", product: { name: "thunderbird-0:102.8.0-2.el8_2.src", product_id: "thunderbird-0:102.8.0-2.el8_2.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_2.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_2.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_2.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_2?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0818
Vulnerability from csaf_redhat
Published
2023-02-20 12:14
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0818", url: "https://access.redhat.com/errata/RHSA-2023:0818", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0818.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:02:20+00:00", generator: { date: "2025-01-13T01:02:20+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0818", initial_release_date: "2023-02-20T12:14:45+00:00", revision_history: [ { date: "2023-02-20T12:14:45+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:02:00+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:20+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.1::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_1.src", product: { name: "thunderbird-0:102.8.0-2.el8_1.src", product_id: "thunderbird-0:102.8.0-2.el8_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_1.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_1.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_1.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_1.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_1.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_1.src", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0812
Vulnerability from csaf_redhat
Published
2023-02-20 08:35
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0812", url: "https://access.redhat.com/errata/RHSA-2023:0812", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0812.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:01:13+00:00", generator: { date: "2025-01-13T01:01:13+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0812", initial_release_date: "2023-02-20T08:35:28+00:00", revision_history: [ { date: "2023-02-20T08:35:28+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:24:02+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:13+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Client Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.src", product: { name: "firefox-0:102.8.0-2.el7_9.src", product_id: "firefox-0:102.8.0-2.el7_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.x86_64", product: { name: "firefox-0:102.8.0-2.el7_9.x86_64", product_id: "firefox-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.i686", product: { name: "firefox-0:102.8.0-2.el7_9.i686", product_id: "firefox-0:102.8.0-2.el7_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=i686", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.s390x", product: { name: "firefox-0:102.8.0-2.el7_9.s390x", product_id: "firefox-0:102.8.0-2.el7_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.ppc64le", product: { name: "firefox-0:102.8.0-2.el7_9.ppc64le", product_id: "firefox-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.ppc64", product: { name: "firefox-0:102.8.0-2.el7_9.ppc64", product_id: "firefox-0:102.8.0-2.el7_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0809
Vulnerability from csaf_redhat
Published
2023-02-20 08:27
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0809", url: "https://access.redhat.com/errata/RHSA-2023:0809", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0809.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:02:11+00:00", generator: { date: "2025-01-13T01:02:11+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0809", initial_release_date: "2023-02-20T08:27:08+00:00", revision_history: [ { date: "2023-02-20T08:27:08+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:02:50+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:11+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:9.0::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.src", product: { name: "firefox-0:102.8.0-2.el9_0.src", product_id: "firefox-0:102.8.0-2.el9_0.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.aarch64", product: { name: "firefox-0:102.8.0-2.el9_0.aarch64", product_id: "firefox-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.ppc64le", product: { name: "firefox-0:102.8.0-2.el9_0.ppc64le", product_id: "firefox-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.x86_64", product: { name: "firefox-0:102.8.0-2.el9_0.x86_64", product_id: "firefox-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.s390x", product: { name: "firefox-0:102.8.0-2.el9_0.s390x", product_id: "firefox-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", }, product_reference: "firefox-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", }, product_reference: "firefox-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", }, product_reference: "firefox-0:102.8.0-2.el9_0.src", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", }, product_reference: "firefox-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0810
Vulnerability from csaf_redhat
Published
2023-02-20 08:27
Modified
2024-11-22 22:05
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0810", url: "https://access.redhat.com/errata/RHSA-2023:0810", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0810.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2024-11-22T22:05:50+00:00", generator: { date: "2024-11-22T22:05:50+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0810", initial_release_date: "2023-02-20T08:27:23+00:00", revision_history: [ { date: "2023-02-20T08:27:23+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T14:11:21+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:05:50+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 9)", product: { name: "Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:9::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.src", product: { name: "firefox-0:102.8.0-2.el9_1.src", product_id: "firefox-0:102.8.0-2.el9_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-x11-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-x11-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-x11-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-x11-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-0:102.8.0-2.el9_1.s390x", product_id: "firefox-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-x11-0:102.8.0-2.el9_1.s390x", product_id: "firefox-x11-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", }, product_reference: "firefox-0:102.8.0-2.el9_1.src", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0823
Vulnerability from csaf_redhat
Published
2023-02-20 12:20
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0823", url: "https://access.redhat.com/errata/RHSA-2023:0823", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0823.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:01:49+00:00", generator: { date: "2025-01-13T01:01:49+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0823", initial_release_date: "2023-02-20T12:20:55+00:00", revision_history: [ { date: "2023-02-20T12:20:55+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:30:46+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:49+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:9.0::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.src", product: { name: "thunderbird-0:102.8.0-2.el9_0.src", product_id: "thunderbird-0:102.8.0-2.el9_0.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.aarch64", product: { name: "thunderbird-0:102.8.0-2.el9_0.aarch64", product_id: "thunderbird-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el9_0.ppc64le", product_id: "thunderbird-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.x86_64", product: { name: "thunderbird-0:102.8.0-2.el9_0.x86_64", product_id: "thunderbird-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.s390x", product: { name: "thunderbird-0:102.8.0-2.el9_0.s390x", product_id: "thunderbird-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.src", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0818
Vulnerability from csaf_redhat
Published
2023-02-20 12:14
Modified
2024-11-22 22:08
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0818", url: "https://access.redhat.com/errata/RHSA-2023:0818", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0818.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2024-11-22T22:08:07+00:00", generator: { date: "2024-11-22T22:08:07+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0818", initial_release_date: "2023-02-20T12:14:45+00:00", revision_history: [ { date: "2023-02-20T12:14:45+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:02:00+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:08:07+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.1::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_1.src", product: { name: "thunderbird-0:102.8.0-2.el8_1.src", product_id: "thunderbird-0:102.8.0-2.el8_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_1.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_1.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_1.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_1.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_1.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_1.src", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:14:45+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0818", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:thunderbird-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0807
Vulnerability from csaf_redhat
Published
2023-02-20 08:30
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: Mozilla Firefox security update
Notes
Topic
An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0807", url: "https://access.redhat.com/errata/RHSA-2023:0807", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0807.json", }, ], title: "Red Hat Security Advisory: Mozilla Firefox security update", tracking: { current_release_date: "2025-01-13T01:01:23+00:00", generator: { date: "2025-01-13T01:01:23+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0807", initial_release_date: "2023-02-20T08:30:10+00:00", revision_history: [ { date: "2023-02-20T08:30:10+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-09T18:22:08+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:23+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.6::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.src", product: { name: "firefox-0:102.8.0-2.el8_6.src", product_id: "firefox-0:102.8.0-2.el8_6.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.aarch64", product: { name: "firefox-0:102.8.0-2.el8_6.aarch64", product_id: "firefox-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_6.ppc64le", product_id: "firefox-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.x86_64", product: { name: "firefox-0:102.8.0-2.el8_6.x86_64", product_id: "firefox-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.s390x", product: { name: "firefox-0:102.8.0-2.el8_6.s390x", product_id: "firefox-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", }, product_reference: "firefox-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", }, product_reference: "firefox-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", }, product_reference: "firefox-0:102.8.0-2.el8_6.src", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0822
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0822", url: "https://access.redhat.com/errata/RHSA-2023:0822", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0822.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:01:38+00:00", generator: { date: "2025-01-13T01:01:38+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0822", initial_release_date: "2023-02-20T12:21:27+00:00", revision_history: [ { date: "2023-02-20T12:21:27+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:33:07+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:38+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.6::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.src", product: { name: "thunderbird-0:102.8.0-2.el8_6.src", product_id: "thunderbird-0:102.8.0-2.el8_6.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.aarch64", product: { name: "thunderbird-0:102.8.0-2.el8_6.aarch64", product_id: "thunderbird-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_6.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_6.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_6.s390x", product: { name: "thunderbird-0:102.8.0-2.el8_6.s390x", product_id: "thunderbird-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_6?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.src", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0822", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:thunderbird-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0821
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0821", url: "https://access.redhat.com/errata/RHSA-2023:0821", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0821.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:02:11+00:00", generator: { date: "2025-01-13T01:02:11+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0821", initial_release_date: "2023-02-20T12:21:25+00:00", revision_history: [ { date: "2023-02-20T12:21:25+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:33:59+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:11+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 8)", product: { name: "Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:8::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.src", product: { name: "thunderbird-0:102.8.0-2.el8_7.src", product_id: "thunderbird-0:102.8.0-2.el8_7.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.aarch64", product: { name: "thunderbird-0:102.8.0-2.el8_7.aarch64", product_id: "thunderbird-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_7.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_7.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_7.s390x", product: { name: "thunderbird-0:102.8.0-2.el8_7.s390x", product_id: "thunderbird-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_7?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.src", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:25+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0821", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:thunderbird-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0811
Vulnerability from csaf_redhat
Published
2023-02-20 08:29
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0811", url: "https://access.redhat.com/errata/RHSA-2023:0811", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0811.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:01:32+00:00", generator: { date: "2025-01-13T01:01:32+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0811", initial_release_date: "2023-02-20T08:29:30+00:00", revision_history: [ { date: "2023-02-20T08:29:30+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:12:10+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:32+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_aus:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_tus:8.2::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_2.src", product: { name: "firefox-0:102.8.0-2.el8_2.src", product_id: "firefox-0:102.8.0-2.el8_2.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_2.x86_64", product: { name: "firefox-0:102.8.0-2.el8_2.x86_64", product_id: "firefox-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_2.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_2.ppc64le", product_id: "firefox-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_2?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", }, product_reference: "firefox-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", }, product_reference: "firefox-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", }, product_reference: "firefox-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:29:30+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0811", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:firefox-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:firefox-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0809
Vulnerability from csaf_redhat
Published
2023-02-20 08:27
Modified
2025-01-13 01:02
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0809", url: "https://access.redhat.com/errata/RHSA-2023:0809", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0809.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:02:11+00:00", generator: { date: "2025-01-13T01:02:11+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0809", initial_release_date: "2023-02-20T08:27:08+00:00", revision_history: [ { date: "2023-02-20T08:27:08+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:02:50+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:02:11+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:9.0::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.src", product: { name: "firefox-0:102.8.0-2.el9_0.src", product_id: "firefox-0:102.8.0-2.el9_0.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.aarch64", product: { name: "firefox-0:102.8.0-2.el9_0.aarch64", product_id: "firefox-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.ppc64le", product: { name: "firefox-0:102.8.0-2.el9_0.ppc64le", product_id: "firefox-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.x86_64", product: { name: "firefox-0:102.8.0-2.el9_0.x86_64", product_id: "firefox-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.s390x", product: { name: "firefox-0:102.8.0-2.el9_0.s390x", product_id: "firefox-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", }, product_reference: "firefox-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", }, product_reference: "firefox-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", }, product_reference: "firefox-0:102.8.0-2.el9_0.src", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", }, product_reference: "firefox-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0808
Vulnerability from csaf_redhat
Published
2023-02-20 08:31
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0808", url: "https://access.redhat.com/errata/RHSA-2023:0808", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0808.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:01:51+00:00", generator: { date: "2025-01-13T01:01:51+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0808", initial_release_date: "2023-02-20T08:31:14+00:00", revision_history: [ { date: "2023-02-20T08:31:14+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:14:41+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:51+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 8)", product: { name: "Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:8::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.src", product: { name: "firefox-0:102.8.0-2.el8_7.src", product_id: "firefox-0:102.8.0-2.el8_7.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.aarch64", product: { name: "firefox-0:102.8.0-2.el8_7.aarch64", product_id: "firefox-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_7.ppc64le", product_id: "firefox-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.x86_64", product: { name: "firefox-0:102.8.0-2.el8_7.x86_64", product_id: "firefox-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_7.s390x", product: { name: "firefox-0:102.8.0-2.el8_7.s390x", product_id: "firefox-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_7?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_7?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", }, product_reference: "firefox-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", }, product_reference: "firefox-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", }, product_reference: "firefox-0:102.8.0-2.el8_7.src", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.aarch64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.s390x", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", product_id: "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_7.x86_64", relates_to_product_reference: "AppStream-8.7.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:31:14+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0808", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.src", "AppStream-8.7.0.Z.MAIN:firefox-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el8_7.x86_64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.aarch64", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.ppc64le", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.s390x", "AppStream-8.7.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el8_7.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0820
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0820", url: "https://access.redhat.com/errata/RHSA-2023:0820", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0820.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:01:27+00:00", generator: { date: "2025-01-13T01:01:27+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0820", initial_release_date: "2023-02-20T12:21:56+00:00", revision_history: [ { date: "2023-02-20T12:21:56+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:34:14+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:27+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.4::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.src", product: { name: "thunderbird-0:102.8.0-2.el8_4.src", product_id: "thunderbird-0:102.8.0-2.el8_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.aarch64", product: { name: "thunderbird-0:102.8.0-2.el8_4.aarch64", product_id: "thunderbird-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_4.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_4.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.s390x", product: { name: "thunderbird-0:102.8.0-2.el8_4.s390x", product_id: "thunderbird-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.src", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0807
Vulnerability from csaf_redhat
Published
2023-02-20 08:30
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: Mozilla Firefox security update
Notes
Topic
An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0807", url: "https://access.redhat.com/errata/RHSA-2023:0807", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0807.json", }, ], title: "Red Hat Security Advisory: Mozilla Firefox security update", tracking: { current_release_date: "2025-01-13T01:01:23+00:00", generator: { date: "2025-01-13T01:01:23+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0807", initial_release_date: "2023-02-20T08:30:10+00:00", revision_history: [ { date: "2023-02-20T08:30:10+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-09T18:22:08+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:23+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.6::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.src", product: { name: "firefox-0:102.8.0-2.el8_6.src", product_id: "firefox-0:102.8.0-2.el8_6.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.aarch64", product: { name: "firefox-0:102.8.0-2.el8_6.aarch64", product_id: "firefox-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_6.ppc64le", product_id: "firefox-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.x86_64", product: { name: "firefox-0:102.8.0-2.el8_6.x86_64", product_id: "firefox-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_6.s390x", product: { name: "firefox-0:102.8.0-2.el8_6.s390x", product_id: "firefox-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_6?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_6?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", }, product_reference: "firefox-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", }, product_reference: "firefox-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", }, product_reference: "firefox-0:102.8.0-2.el8_6.src", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.aarch64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.s390x", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", product_id: "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_6.x86_64", relates_to_product_reference: "AppStream-8.6.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:30:10+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0807", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.src", "AppStream-8.6.0.Z.EUS:firefox-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.s390x", "AppStream-8.6.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el8_6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0809
Vulnerability from csaf_redhat
Published
2023-02-20 08:27
Modified
2024-11-22 22:06
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0809", url: "https://access.redhat.com/errata/RHSA-2023:0809", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0809.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2024-11-22T22:06:22+00:00", generator: { date: "2024-11-22T22:06:22+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0809", initial_release_date: "2023-02-20T08:27:08+00:00", revision_history: [ { date: "2023-02-20T08:27:08+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:02:50+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:06:22+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:9.0::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.src", product: { name: "firefox-0:102.8.0-2.el9_0.src", product_id: "firefox-0:102.8.0-2.el9_0.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.aarch64", product: { name: "firefox-0:102.8.0-2.el9_0.aarch64", product_id: "firefox-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.ppc64le", product: { name: "firefox-0:102.8.0-2.el9_0.ppc64le", product_id: "firefox-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.x86_64", product: { name: "firefox-0:102.8.0-2.el9_0.x86_64", product_id: "firefox-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_0.s390x", product: { name: "firefox-0:102.8.0-2.el9_0.s390x", product_id: "firefox-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_0?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", }, product_reference: "firefox-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", }, product_reference: "firefox-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", }, product_reference: "firefox-0:102.8.0-2.el9_0.src", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", }, product_reference: "firefox-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:08+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0809", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:firefox-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:firefox-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0812
Vulnerability from csaf_redhat
Published
2023-02-20 08:35
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0812", url: "https://access.redhat.com/errata/RHSA-2023:0812", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0812.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:01:13+00:00", generator: { date: "2025-01-13T01:01:13+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0812", initial_release_date: "2023-02-20T08:35:28+00:00", revision_history: [ { date: "2023-02-20T08:35:28+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:24:02+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:13+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Client Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.src", product: { name: "firefox-0:102.8.0-2.el7_9.src", product_id: "firefox-0:102.8.0-2.el7_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.x86_64", product: { name: "firefox-0:102.8.0-2.el7_9.x86_64", product_id: "firefox-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.i686", product: { name: "firefox-0:102.8.0-2.el7_9.i686", product_id: "firefox-0:102.8.0-2.el7_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=i686", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.s390x", product: { name: "firefox-0:102.8.0-2.el7_9.s390x", product_id: "firefox-0:102.8.0-2.el7_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.ppc64le", product: { name: "firefox-0:102.8.0-2.el7_9.ppc64le", product_id: "firefox-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.ppc64", product: { name: "firefox-0:102.8.0-2.el7_9.ppc64", product_id: "firefox-0:102.8.0-2.el7_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0806
Vulnerability from csaf_redhat
Published
2023-02-20 08:19
Modified
2024-11-22 22:05
Summary
Red Hat Security Advisory: Mozilla Firefox security update
Notes
Topic
An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0806", url: "https://access.redhat.com/errata/RHSA-2023:0806", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0806.json", }, ], title: "Red Hat Security Advisory: Mozilla Firefox security update", tracking: { current_release_date: "2024-11-22T22:05:08+00:00", generator: { date: "2024-11-22T22:05:08+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0806", initial_release_date: "2023-02-20T08:19:20+00:00", revision_history: [ { date: "2023-02-20T08:19:20+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-09T18:16:16+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:05:08+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.1::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_1.src", product: { name: "firefox-0:102.8.0-2.el8_1.src", product_id: "firefox-0:102.8.0-2.el8_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_1.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_1.ppc64le", product_id: "firefox-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_1.x86_64", product: { name: "firefox-0:102.8.0-2.el8_1.x86_64", product_id: "firefox-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_1.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", }, product_reference: "firefox-0:102.8.0-2.el8_1.src", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0819
Vulnerability from csaf_redhat
Published
2023-02-20 12:15
Modified
2024-11-22 22:08
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0819", url: "https://access.redhat.com/errata/RHSA-2023:0819", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0819.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2024-11-22T22:08:34+00:00", generator: { date: "2024-11-22T22:08:34+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0819", initial_release_date: "2023-02-20T12:15:40+00:00", revision_history: [ { date: "2023-02-20T12:15:40+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T10:42:30+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:08:34+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_aus:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.2::appstream", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_tus:8.2::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_2.src", product: { name: "thunderbird-0:102.8.0-2.el8_2.src", product_id: "thunderbird-0:102.8.0-2.el8_2.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_2.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_2?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_2.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_2.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_2?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_2?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.AUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)", product_id: "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.TUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:15:40+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0819", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.AUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.E4S:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.ppc64le", "AppStream-8.2.0.Z.E4S:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.src", "AppStream-8.2.0.Z.TUS:thunderbird-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debuginfo-0:102.8.0-2.el8_2.x86_64", "AppStream-8.2.0.Z.TUS:thunderbird-debugsource-0:102.8.0-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0824
Vulnerability from csaf_redhat
Published
2023-02-20 12:20
Modified
2024-11-22 22:08
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0824", url: "https://access.redhat.com/errata/RHSA-2023:0824", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0824.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2024-11-22T22:08:51+00:00", generator: { date: "2024-11-22T22:08:51+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0824", initial_release_date: "2023-02-20T12:20:46+00:00", revision_history: [ { date: "2023-02-20T12:20:46+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:18:41+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:08:51+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 9)", product: { name: "Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:9::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.src", product: { name: "thunderbird-0:102.8.0-2.el9_1.src", product_id: "thunderbird-0:102.8.0-2.el9_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.aarch64", product: { name: "thunderbird-0:102.8.0-2.el9_1.aarch64", product_id: "thunderbird-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el9_1.ppc64le", product_id: "thunderbird-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.x86_64", product: { name: "thunderbird-0:102.8.0-2.el9_1.x86_64", product_id: "thunderbird-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_1.s390x", product: { name: "thunderbird-0:102.8.0-2.el9_1.s390x", product_id: "thunderbird-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_1?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.src", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0824", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:thunderbird-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:thunderbird-debugsource-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023_0812
Vulnerability from csaf_redhat
Published
2023-02-20 08:35
Modified
2024-11-22 22:05
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0812", url: "https://access.redhat.com/errata/RHSA-2023:0812", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0812.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2024-11-22T22:05:18+00:00", generator: { date: "2024-11-22T22:05:18+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2023:0812", initial_release_date: "2023-02-20T08:35:28+00:00", revision_history: [ { date: "2023-02-20T08:35:28+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:24:02+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T22:05:18+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Client Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.src", product: { name: "firefox-0:102.8.0-2.el7_9.src", product_id: "firefox-0:102.8.0-2.el7_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.x86_64", product: { name: "firefox-0:102.8.0-2.el7_9.x86_64", product_id: "firefox-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.i686", product: { name: "firefox-0:102.8.0-2.el7_9.i686", product_id: "firefox-0:102.8.0-2.el7_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=i686", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.s390x", product: { name: "firefox-0:102.8.0-2.el7_9.s390x", product_id: "firefox-0:102.8.0-2.el7_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.ppc64le", product: { name: "firefox-0:102.8.0-2.el7_9.ppc64le", product_id: "firefox-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el7_9.ppc64", product: { name: "firefox-0:102.8.0-2.el7_9.ppc64", product_id: "firefox-0:102.8.0-2.el7_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el7_9?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", product: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", product_id: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el7_9?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Client-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Server-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", }, product_reference: "firefox-0:102.8.0-2.el7_9.src", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.i686", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.s390x", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", relates_to_product_reference: "7Workstation-optional-7.9.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:35:28+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0812", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Client-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Client-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Server-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Server-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.src", "7Workstation-optional-7.9.Z:firefox-0:102.8.0-2.el7_9.x86_64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.i686", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.ppc64le", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.s390x", "7Workstation-optional-7.9.Z:firefox-debuginfo-0:102.8.0-2.el7_9.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0810
Vulnerability from csaf_redhat
Published
2023-02-20 08:27
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0810", url: "https://access.redhat.com/errata/RHSA-2023:0810", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0810.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-13T01:01:41+00:00", generator: { date: "2025-01-13T01:01:41+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0810", initial_release_date: "2023-02-20T08:27:23+00:00", revision_history: [ { date: "2023-02-20T08:27:23+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T14:11:21+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:41+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream (v. 9)", product: { name: "Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:9::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.src", product: { name: "firefox-0:102.8.0-2.el9_1.src", product_id: "firefox-0:102.8.0-2.el9_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-x11-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-x11-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=aarch64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-x11-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-x11-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-0:102.8.0-2.el9_1.s390x", product_id: "firefox-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "firefox-x11-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-x11-0:102.8.0-2.el9_1.s390x", product_id: "firefox-x11-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-x11@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", product_id: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el9_1?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", product: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", product_id: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el9_1?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", }, product_reference: "firefox-0:102.8.0-2.el9_1.src", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.aarch64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.ppc64le", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.s390x", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, { category: "default_component_of", full_product_name: { name: "firefox-x11-0:102.8.0-2.el9_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", product_id: "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", }, product_reference: "firefox-x11-0:102.8.0-2.el9_1.x86_64", relates_to_product_reference: "AppStream-9.1.0.Z.MAIN", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:27:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0810", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.src", "AppStream-9.1.0.Z.MAIN:firefox-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debuginfo-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-debugsource-0:102.8.0-2.el9_1.x86_64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.aarch64", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.ppc64le", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.s390x", "AppStream-9.1.0.Z.MAIN:firefox-x11-0:102.8.0-2.el9_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0806
Vulnerability from csaf_redhat
Published
2023-02-20 08:19
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: Mozilla Firefox security update
Notes
Topic
An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0806", url: "https://access.redhat.com/errata/RHSA-2023:0806", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0806.json", }, ], title: "Red Hat Security Advisory: Mozilla Firefox security update", tracking: { current_release_date: "2025-01-13T01:01:03+00:00", generator: { date: "2025-01-13T01:01:03+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0806", initial_release_date: "2023-02-20T08:19:20+00:00", revision_history: [ { date: "2023-02-20T08:19:20+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-09T18:16:16+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:03+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.1::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_1.src", product: { name: "firefox-0:102.8.0-2.el8_1.src", product_id: "firefox-0:102.8.0-2.el8_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_1.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_1.ppc64le", product_id: "firefox-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_1.x86_64", product: { name: "firefox-0:102.8.0-2.el8_1.x86_64", product_id: "firefox-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_1.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", }, product_reference: "firefox-0:102.8.0-2.el8_1.src", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0806
Vulnerability from csaf_redhat
Published
2023-02-20 08:19
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: Mozilla Firefox security update
Notes
Topic
An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.8.0 ESR.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Mozilla Firefox is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open source web browser designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser full-screen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Full-screen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out-of-bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0806", url: "https://access.redhat.com/errata/RHSA-2023:0806", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0806.json", }, ], title: "Red Hat Security Advisory: Mozilla Firefox security update", tracking: { current_release_date: "2025-01-13T01:01:03+00:00", generator: { date: "2025-01-13T01:01:03+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0806", initial_release_date: "2023-02-20T08:19:20+00:00", revision_history: [ { date: "2023-02-20T08:19:20+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-09T18:16:16+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:03+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product: { name: "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_e4s:8.1::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_1.src", product: { name: "firefox-0:102.8.0-2.el8_1.src", product_id: "firefox-0:102.8.0-2.el8_1.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_1.ppc64le", product: { name: "firefox-0:102.8.0-2.el8_1.ppc64le", product_id: "firefox-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", product: { name: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", product_id: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_1?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_id: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_1?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-0:102.8.0-2.el8_1.x86_64", product: { name: "firefox-0:102.8.0-2.el8_1.x86_64", product_id: "firefox-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", product: { name: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", product_id: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debugsource@102.8.0-2.el8_1?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", product: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", product_id: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@102.8.0-2.el8_1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "firefox-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_1.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", }, product_reference: "firefox-0:102.8.0-2.el8_1.src", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", }, product_reference: "firefox-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", }, product_reference: "firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, { category: "default_component_of", full_product_name: { name: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", product_id: "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", }, product_reference: "firefox-debugsource-0:102.8.0-2.el8_1.x86_64", relates_to_product_reference: "AppStream-8.1.0.Z.E4S", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T08:19:20+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0806", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.src", "AppStream-8.1.0.Z.E4S:firefox-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debuginfo-0:102.8.0-2.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:firefox-debugsource-0:102.8.0-2.el8_1.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
rhsa-2023:0820
Vulnerability from csaf_redhat
Published
2023-02-20 12:21
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0820", url: "https://access.redhat.com/errata/RHSA-2023:0820", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0820.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:01:27+00:00", generator: { date: "2025-01-13T01:01:27+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0820", initial_release_date: "2023-02-20T12:21:56+00:00", revision_history: [ { date: "2023-02-20T12:21:56+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:34:14+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:27+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.4::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.src", product: { name: "thunderbird-0:102.8.0-2.el8_4.src", product_id: "thunderbird-0:102.8.0-2.el8_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.aarch64", product: { name: "thunderbird-0:102.8.0-2.el8_4.aarch64", product_id: "thunderbird-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el8_4.ppc64le", product_id: "thunderbird-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.x86_64", product: { name: "thunderbird-0:102.8.0-2.el8_4.x86_64", product_id: "thunderbird-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el8_4.s390x", product: { name: "thunderbird-0:102.8.0-2.el8_4.s390x", product_id: "thunderbird-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el8_4?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el8_4?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.src", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", product_id: "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", relates_to_product_reference: "AppStream-8.4.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:21:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0820", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.src", "AppStream-8.4.0.Z.EUS:thunderbird-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.s390x", "AppStream-8.4.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el8_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
RHSA-2023:0823
Vulnerability from csaf_redhat
Published
2023-02-20 12:20
Modified
2025-01-13 01:01
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
[Updated 09 March 2023]
The CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.8.0.
Security Fix(es):
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[Updated 09 March 2023]\n\nThe CVE-2023-0767 was previously incorrectly listed as fixed in this erratum. The CVE list was updated to remove the CVE. No changes have been made to the packages.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2023:0823", url: "https://access.redhat.com/errata/RHSA-2023:0823", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0823.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-13T01:01:49+00:00", generator: { date: "2025-01-13T01:01:49+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2023:0823", initial_release_date: "2023-02-20T12:20:55+00:00", revision_history: [ { date: "2023-02-20T12:20:55+00:00", number: "1", summary: "Initial version", }, { date: "2023-03-13T11:30:46+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-13T01:01:49+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:9.0::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.src", product: { name: "thunderbird-0:102.8.0-2.el9_0.src", product_id: "thunderbird-0:102.8.0-2.el9_0.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.aarch64", product: { name: "thunderbird-0:102.8.0-2.el9_0.aarch64", product_id: "thunderbird-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.ppc64le", product: { name: "thunderbird-0:102.8.0-2.el9_0.ppc64le", product_id: "thunderbird-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.x86_64", product: { name: "thunderbird-0:102.8.0-2.el9_0.x86_64", product_id: "thunderbird-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:102.8.0-2.el9_0.s390x", product: { name: "thunderbird-0:102.8.0-2.el9_0.s390x", product_id: "thunderbird-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", product: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", product_id: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debugsource@102.8.0-2.el9_0?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", product: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", product_id: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@102.8.0-2.el9_0?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.src", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", }, product_reference: "thunderbird-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", }, product_reference: "thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", product_id: "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", }, product_reference: "thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", relates_to_product_reference: "AppStream-9.0.0.Z.EUS", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Kai Engert", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-0616", cwe: { id: "CWE-449", name: "The UI Performs the Wrong Action", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2171397", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-0616", }, { category: "external", summary: "RHBZ#2171397", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2171397", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-0616", url: "https://www.cve.org/CVERecord?id=CVE-2023-0616", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-0616", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Johan Carlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25728", cwe: { id: "CWE-1021", name: "Improper Restriction of Rendered UI Layers or Frames", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170374", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nThe `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Content security policy leak in violation reports using iframes", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25728", }, { category: "external", summary: "RHBZ#2170374", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170374", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25728", url: "https://www.cve.org/CVERecord?id=CVE-2023-25728", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Content security policy leak in violation reports using iframes", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Vitor Torres", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25729", cwe: { id: "CWE-84", name: "Improper Neutralization of Encoded URI Schemes in a Web Page", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170382", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nPermission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Extensions could have opened external schemes without user knowledge", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25729", }, { category: "external", summary: "RHBZ#2170382", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170382", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25729", url: "https://www.cve.org/CVERecord?id=CVE-2023-25729", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Extensions could have opened external schemes without user knowledge", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Irvan Kurniawan", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25730", cwe: { id: "CWE-821", name: "Incorrect Synchronization", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170375", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA background script invoking `requestFullscreen` and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Screen hijack via browser fullscreen mode", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25730", }, { category: "external", summary: "RHBZ#2170375", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170375", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25730", url: "https://www.cve.org/CVERecord?id=CVE-2023-25730", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Screen hijack via browser fullscreen mode", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Ronald Crane", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25732", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170383", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen encoding data from an `inputStream` in `xpcom` the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out of bounds memory write from EncodeInputStream", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25732", }, { category: "external", summary: "RHBZ#2170383", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170383", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25732", url: "https://www.cve.org/CVERecord?id=CVE-2023-25732", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Out of bounds memory write from EncodeInputStream", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Samuel Groß", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25735", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170378", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25735", }, { category: "external", summary: "RHBZ#2170378", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170378", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25735", url: "https://www.cve.org/CVERecord?id=CVE-2023-25735", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Lukas Bernhard", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25737", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170379", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nAn invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25737", }, { category: "external", summary: "RHBZ#2170379", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170379", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25737", url: "https://www.cve.org/CVERecord?id=CVE-2023-25737", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Holger Fuhrmannek", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25739", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170381", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nModule load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in `ScriptLoadContext`.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25739", }, { category: "external", summary: "RHBZ#2170381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25739", url: "https://www.cve.org/CVERecord?id=CVE-2023-25739", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Goras Francesco", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25742", cwe: { id: "CWE-173", name: "Improper Handling of Alternate Encoding", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170390", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Web Crypto ImportKey crashes tab", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25742", }, { category: "external", summary: "RHBZ#2170390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170390", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25742", url: "https://www.cve.org/CVERecord?id=CVE-2023-25742", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Mozilla: Web Crypto ImportKey crashes tab", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Hafiizh", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25743", cwe: { id: "CWE-357", name: "Insufficient UI Warning of Dangerous Operations", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170376", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nA lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.\r\n\r\n*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Fullscreen notification not shown in Firefox Focus", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25743", }, { category: "external", summary: "RHBZ#2170376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170376", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25743", url: "https://www.cve.org/CVERecord?id=CVE-2023-25743", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Fullscreen notification not shown in Firefox Focus", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25744", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170391", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25744", }, { category: "external", summary: "RHBZ#2170391", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170391", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25744", url: "https://www.cve.org/CVERecord?id=CVE-2023-25744", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2023-25746", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2023-02-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2170402", }, ], notes: [ { category: "description", text: "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2023-25746", }, { category: "external", summary: "RHBZ#2170402", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2170402", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2023-25746", url: "https://www.cve.org/CVERecord?id=CVE-2023-25746", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746", }, ], release_date: "2023-02-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2023-02-20T12:20:55+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2023:0823", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.src", "AppStream-9.0.0.Z.EUS:thunderbird-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debuginfo-0:102.8.0-2.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.s390x", "AppStream-9.0.0.Z.EUS:thunderbird-debugsource-0:102.8.0-2.el9_0.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox ESR 102.8", }, ], }
wid-sec-w-2023-0407
Vulnerability from csaf_certbund
Published
2023-02-16 23:00
Modified
2023-05-29 22:00
Summary
Mozilla Thunderbird: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Thunderbird ist ein Open Source E-Mail Client.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Informationen falsch darzustellen.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
- Sonstiges
{ document: { aggregate_severity: { text: "mittel", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "Thunderbird ist ein Open Source E-Mail Client.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Informationen falsch darzustellen.", title: "Angriff", }, { category: "general", text: "- UNIX\n- Linux\n- Windows\n- Sonstiges", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2023-0407 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0407.json", }, { category: "self", summary: "WID-SEC-2023-0407 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0407", }, { category: "external", summary: "Gentoo Linux Security Advisory GLSA-202305-36 vom 2023-05-30", url: "https://security.gentoo.org/glsa/202305-36", }, { category: "external", summary: "NetApp Security Advisory NTAP-20230324-0008 vom 2023-03-24", url: "https://security.netapp.com/advisory/ntap-20230324-0008/", }, { category: "external", summary: "XEROX Security Advisory XRX23-002 vom 2023-03-23", url: "https://security.business.xerox.com/wp-content/uploads/2023/03/Xerox-Security-Bulletin-XRX23-002-FreeFlow-Print-Server-v2_Windows10.pdf", }, { category: "external", summary: "Ubuntu Security Notice USN-5943-1 vom 2023-03-13", url: "https://ubuntu.com/security/notices/USN-5943-1", }, { category: "external", summary: "Amazon Linux Security Advisory ALAS2-2023-1983 vom 2023-03-07", url: "https://alas.aws.amazon.com/AL2/ALAS-2023-1983.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0599-1 vom 2023-03-02", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013965.html", }, { category: "external", summary: "Mozilla Foundation Security Advisory 2023-07 vom 2023-02-16", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0443-1 vom 2023-02-17", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013833.html", }, { category: "external", summary: "Debian Security Advisory DSA-5355 vom 2023-02-19", url: "https://www.debian.org/security/2023/dsa-5355", }, { category: "external", summary: "Debian Security Advisory DSA-5353 vom 2023-02-18", url: "https://www.debian.org/security/2023/dsa-5353", }, { category: "external", summary: "Debian Security Advisory DLA-3324 vom 2023-02-20", url: "https://lists.debian.org/debian-lts-announce/2023/02/msg00018.html", }, { category: "external", summary: "Debian Security Advisory DLA-3327 vom 2023-02-20", url: "https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0824 vom 2023-02-21", url: "https://linux.oracle.com/errata/ELSA-2023-0824.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0821 vom 2023-02-20", url: "https://linux.oracle.com/errata/ELSA-2023-0821.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0817 vom 2023-02-21", url: "https://linux.oracle.com/errata/ELSA-2023-0817.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0824 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0824", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0823 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0823", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0822 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0822", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0821 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0821", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0820 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0820", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0819 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0819", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0818 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0818", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0817 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0817", }, { category: "external", summary: "CentOS Security Advisory CESA-2023:0817 vom 2023-02-22", url: "https://lists.centos.org/pipermail/centos-announce/2023-February/086375.html", }, ], source_lang: "en-US", title: "Mozilla Thunderbird: Mehrere Schwachstellen", tracking: { current_release_date: "2023-05-29T22:00:00.000+00:00", generator: { date: "2024-08-15T17:43:55.207+00:00", engine: { name: "BSI-WID", version: "1.3.5", }, }, id: "WID-SEC-W-2023-0407", initial_release_date: "2023-02-16T23:00:00.000+00:00", revision_history: [ { date: "2023-02-16T23:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, { date: "2023-02-19T23:00:00.000+00:00", number: "2", summary: "Neue Updates von SUSE, Debian und Fedora aufgenommen", }, { date: "2023-02-20T23:00:00.000+00:00", number: "3", summary: "Neue Updates von Debian, Oracle Linux und Red Hat aufgenommen", }, { date: "2023-02-22T23:00:00.000+00:00", number: "4", summary: "Neue Updates von CentOS aufgenommen", }, { date: "2023-03-02T23:00:00.000+00:00", number: "5", summary: "Neue Updates von SUSE aufgenommen", }, { date: "2023-03-06T23:00:00.000+00:00", number: "6", summary: "Neue Updates von Amazon aufgenommen", }, { date: "2023-03-12T23:00:00.000+00:00", number: "7", summary: "Neue Updates von Ubuntu aufgenommen", }, { date: "2023-03-22T23:00:00.000+00:00", number: "8", summary: "Neue Updates von XEROX aufgenommen", }, { date: "2023-03-26T22:00:00.000+00:00", number: "9", summary: "Neue Updates von NetApp aufgenommen", }, { date: "2023-05-29T22:00:00.000+00:00", number: "10", summary: "Neue Updates von Gentoo aufgenommen", }, ], status: "final", version: "10", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Amazon Linux 2", product: { name: "Amazon Linux 2", product_id: "398363", product_identification_helper: { cpe: "cpe:/o:amazon:linux_2:-", }, }, }, ], category: "vendor", name: "Amazon", }, { branches: [ { category: "product_name", name: "Debian Linux", product: { name: "Debian Linux", product_id: "2951", product_identification_helper: { cpe: "cpe:/o:debian:debian_linux:-", }, }, }, ], category: "vendor", name: "Debian", }, { branches: [ { category: "product_name", name: "Gentoo Linux", product: { name: "Gentoo Linux", product_id: "T012167", product_identification_helper: { cpe: "cpe:/o:gentoo:linux:-", }, }, }, ], category: "vendor", name: "Gentoo", }, { branches: [ { category: "product_name", name: "Mozilla Thunderbird < 102.8", product: { name: "Mozilla Thunderbird < 102.8", product_id: "T026405", product_identification_helper: { cpe: "cpe:/a:mozilla:thunderbird:102.8", }, }, }, ], category: "vendor", name: "Mozilla", }, { branches: [ { category: "product_name", name: "NetApp ActiveIQ Unified Manager", product: { name: "NetApp ActiveIQ Unified Manager", product_id: "658714", product_identification_helper: { cpe: "cpe:/a:netapp:active_iq_unified_manager:-::~~~vmware_vsphere~~", }, }, }, ], category: "vendor", name: "NetApp", }, { branches: [ { category: "product_name", name: "Open Source CentOS", product: { name: "Open Source CentOS", product_id: "1727", product_identification_helper: { cpe: "cpe:/o:centos:centos:-", }, }, }, ], category: "vendor", name: "Open Source", }, { branches: [ { category: "product_name", name: "Oracle Linux", product: { name: "Oracle Linux", product_id: "T004914", product_identification_helper: { cpe: "cpe:/o:oracle:linux:-", }, }, }, ], category: "vendor", name: "Oracle", }, { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux", product: { name: "Red Hat Enterprise Linux", product_id: "67646", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:-", }, }, }, ], category: "vendor", name: "Red Hat", }, { branches: [ { category: "product_name", name: "SUSE Linux", product: { name: "SUSE Linux", product_id: "T002207", product_identification_helper: { cpe: "cpe:/o:suse:suse_linux:-", }, }, }, ], category: "vendor", name: "SUSE", }, { branches: [ { category: "product_name", name: "Ubuntu Linux", product: { name: "Ubuntu Linux", product_id: "T000126", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:-", }, }, }, ], category: "vendor", name: "Ubuntu", }, { branches: [ { category: "product_name", name: "Xerox FreeFlow Print Server v2", product: { name: "Xerox FreeFlow Print Server v2", product_id: "T014888", product_identification_helper: { cpe: "cpe:/a:xerox:freeflow_print_server:v2", }, }, }, ], category: "vendor", name: "Xerox", }, ], }, vulnerabilities: [ { cve: "CVE-2023-0616", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-0616", }, { cve: "CVE-2023-0767", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-0767", }, { cve: "CVE-2023-25728", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25728", }, { cve: "CVE-2023-25729", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25729", }, { cve: "CVE-2023-25730", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25730", }, { cve: "CVE-2023-25732", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25732", }, { cve: "CVE-2023-25734", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25734", }, { cve: "CVE-2023-25735", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25735", }, { cve: "CVE-2023-25737", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25737", }, { cve: "CVE-2023-25738", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25738", }, { cve: "CVE-2023-25739", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25739", }, { cve: "CVE-2023-25742", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25742", }, { cve: "CVE-2023-25746", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25746", }, ], }
wid-sec-w-2023-1424
Vulnerability from csaf_certbund
Published
2023-06-12 22:00
Modified
2023-06-12 22:00
Summary
Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
FreeFlow-Druckserver ist eine Druckserveranwendung für Xerox-Produktionsdrucker, die Flexibilität, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.
Betroffene Betriebssysteme
- UNIX
{ document: { aggregate_severity: { text: "hoch", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "FreeFlow-Druckserver ist eine Druckserveranwendung für Xerox-Produktionsdrucker, die Flexibilität, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", title: "Angriff", }, { category: "general", text: "- UNIX", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2023-1424 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1424.json", }, { category: "self", summary: "WID-SEC-2023-1424 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1424", }, { category: "external", summary: "Xerox Security Bulletin vom 2023-06-12", url: "https://securitydocs.business.xerox.com/wp-content/uploads/2023/06/Xerox-Security-Bulletin-XRX23-009-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf", }, ], source_lang: "en-US", title: "Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen", tracking: { current_release_date: "2023-06-12T22:00:00.000+00:00", generator: { date: "2024-08-15T17:52:15.756+00:00", engine: { name: "BSI-WID", version: "1.3.5", }, }, id: "WID-SEC-W-2023-1424", initial_release_date: "2023-06-12T22:00:00.000+00:00", revision_history: [ { date: "2023-06-12T22:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Xerox FreeFlow Print Server v9 for Solaris", product: { name: "Xerox FreeFlow Print Server v9 for Solaris", product_id: "T028053", product_identification_helper: { cpe: "cpe:/a:xerox:freeflow_print_server:v9_for_solaris", }, }, }, ], category: "vendor", name: "Xerox", }, ], }, vulnerabilities: [ { cve: "CVE-2023-28708", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-28708", }, { cve: "CVE-2023-28176", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-28176", }, { cve: "CVE-2023-28164", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-28164", }, { cve: "CVE-2023-28163", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-28163", }, { cve: "CVE-2023-28162", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-28162", }, { cve: "CVE-2023-27522", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-27522", }, { cve: "CVE-2023-25752", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25752", }, { cve: "CVE-2023-25751", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25751", }, { cve: "CVE-2023-25746", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25746", }, { cve: "CVE-2023-25744", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25744", }, { cve: "CVE-2023-25743", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25743", }, { cve: "CVE-2023-25742", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25742", }, { cve: "CVE-2023-25739", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25739", }, { cve: "CVE-2023-25738", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25738", }, { cve: "CVE-2023-25737", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25737", }, { cve: "CVE-2023-25735", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25735", }, { cve: "CVE-2023-25734", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25734", }, { cve: "CVE-2023-25732", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25732", }, { cve: "CVE-2023-25730", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25730", }, { cve: "CVE-2023-25729", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25729", }, { cve: "CVE-2023-25728", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25728", }, { cve: "CVE-2023-25690", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25690", }, { cve: "CVE-2023-24998", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-24998", }, { cve: "CVE-2023-24807", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-24807", }, { cve: "CVE-2023-24580", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-24580", }, { cve: "CVE-2023-23969", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23969", }, { cve: "CVE-2023-23946", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23946", }, { cve: "CVE-2023-23936", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23936", }, { cve: "CVE-2023-23920", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23920", }, { cve: "CVE-2023-23919", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23919", }, { cve: "CVE-2023-23918", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23918", }, { cve: "CVE-2023-23605", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23605", }, { cve: "CVE-2023-23603", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23603", }, { cve: "CVE-2023-23602", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23602", }, { cve: "CVE-2023-23601", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23601", }, { cve: "CVE-2023-23599", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23599", }, { cve: "CVE-2023-23598", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23598", }, { cve: "CVE-2023-22809", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-22809", }, { cve: "CVE-2023-22490", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-22490", }, { cve: "CVE-2023-22003", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-22003", }, { cve: "CVE-2023-21985", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21985", }, { cve: "CVE-2023-21984", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21984", }, { cve: "CVE-2023-21928", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21928", }, { cve: "CVE-2023-21896", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21896", }, { cve: "CVE-2023-21843", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21843", }, { cve: "CVE-2023-21840", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21840", }, { cve: "CVE-2023-21830", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21830", }, { cve: "CVE-2023-0804", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0804", }, { cve: "CVE-2023-0803", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0803", }, { cve: "CVE-2023-0802", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0802", }, { cve: "CVE-2023-0801", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0801", }, { cve: "CVE-2023-0800", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0800", }, { cve: "CVE-2023-0799", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0799", }, { cve: "CVE-2023-0798", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0798", }, { cve: "CVE-2023-0797", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0797", }, { cve: "CVE-2023-0796", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0796", }, { cve: "CVE-2023-0795", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0795", }, { cve: "CVE-2023-0767", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0767", }, { cve: "CVE-2023-0662", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0662", }, { cve: "CVE-2023-0616", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0616", }, { cve: "CVE-2023-0568", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0568", }, { cve: "CVE-2023-0567", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0567", }, { cve: "CVE-2023-0430", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0430", }, { cve: "CVE-2023-0417", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0417", }, { cve: "CVE-2023-0416", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0416", }, { cve: "CVE-2023-0415", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0415", }, { cve: "CVE-2023-0414", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0414", }, { cve: "CVE-2023-0413", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0413", }, { cve: "CVE-2023-0412", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0412", }, { cve: "CVE-2023-0411", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0411", }, { cve: "CVE-2023-0401", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0401", }, { cve: "CVE-2023-0286", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0286", }, { cve: "CVE-2023-0217", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0217", }, { cve: "CVE-2023-0216", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0216", }, { cve: "CVE-2023-0215", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0215", }, { cve: "CVE-2022-48281", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-48281", }, { cve: "CVE-2022-46877", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46877", }, { cve: "CVE-2022-46874", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46874", }, { cve: "CVE-2022-46871", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46871", }, { cve: "CVE-2022-46344", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46344", }, { cve: "CVE-2022-46343", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46343", }, { cve: "CVE-2022-46342", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46342", }, { cve: "CVE-2022-46341", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46341", }, { cve: "CVE-2022-46340", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46340", }, { cve: "CVE-2022-45939", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-45939", }, { cve: "CVE-2022-45199", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-45199", }, { cve: "CVE-2022-45143", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-45143", }, { cve: "CVE-2022-4450", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-4450", }, { cve: "CVE-2022-4345", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-4345", }, { cve: "CVE-2022-4304", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-4304", }, { cve: "CVE-2022-42919", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42919", }, { cve: "CVE-2022-42916", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42916", }, { cve: "CVE-2022-42915", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42915", }, { cve: "CVE-2022-42898", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42898", }, { cve: "CVE-2022-4283", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-4283", }, { cve: "CVE-2022-4203", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-4203", }, { cve: "CVE-2022-42012", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42012", }, { cve: "CVE-2022-42011", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42011", }, { cve: "CVE-2022-42010", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42010", }, { cve: "CVE-2022-41903", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-41903", }, { cve: "CVE-2022-41716", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-41716", }, { cve: "CVE-2022-41715", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-41715", }, { cve: "CVE-2022-40898", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-40898", }, { cve: "CVE-2022-40304", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-40304", }, { cve: "CVE-2022-40303", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-40303", }, { cve: "CVE-2022-39253", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-39253", }, { cve: "CVE-2022-3924", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3924", }, { cve: "CVE-2022-38784", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-38784", }, { cve: "CVE-2022-38171", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-38171", }, { cve: "CVE-2022-37436", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-37436", }, { cve: "CVE-2022-3736", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3736", }, { cve: "CVE-2022-3705", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3705", }, { cve: "CVE-2022-36760", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-36760", }, { cve: "CVE-2022-36227", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-36227", }, { cve: "CVE-2022-36114", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-36114", }, { cve: "CVE-2022-36113", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-36113", }, { cve: "CVE-2022-35260", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-35260", }, { cve: "CVE-2022-35252", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-35252", }, { cve: "CVE-2022-3515", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3515", }, { cve: "CVE-2022-3352", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3352", }, { cve: "CVE-2022-3324", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3324", }, { cve: "CVE-2022-3297", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3297", }, { cve: "CVE-2022-3296", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3296", }, { cve: "CVE-2022-3278", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3278", }, { cve: "CVE-2022-3256", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3256", }, { cve: "CVE-2022-3235", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3235", }, { cve: "CVE-2022-3234", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3234", }, { cve: "CVE-2022-32221", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32221", }, { cve: "CVE-2022-32208", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32208", }, { cve: "CVE-2022-32207", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32207", }, { cve: "CVE-2022-32206", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32206", }, { cve: "CVE-2022-32205", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32205", }, { cve: "CVE-2022-32190", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32190", }, { cve: "CVE-2022-32189", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32189", }, { cve: "CVE-2022-32148", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32148", }, { cve: "CVE-2022-3153", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3153", }, { cve: "CVE-2022-3134", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3134", }, { cve: "CVE-2022-3099", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3099", }, { cve: "CVE-2022-3094", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3094", }, { cve: "CVE-2022-30635", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30635", }, { cve: "CVE-2022-30634", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30634", }, { cve: "CVE-2022-30633", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30633", }, { cve: "CVE-2022-30632", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30632", }, { cve: "CVE-2022-30631", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30631", }, { cve: "CVE-2022-30630", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30630", }, { cve: "CVE-2022-30629", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30629", }, { cve: "CVE-2022-30580", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30580", }, { cve: "CVE-2022-3037", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3037", }, { cve: "CVE-2022-3016", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3016", }, { cve: "CVE-2022-29804", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-29804", }, { cve: "CVE-2022-2980", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2980", }, { cve: "CVE-2022-29526", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-29526", }, { cve: "CVE-2022-2946", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2946", }, { cve: "CVE-2022-2929", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2929", }, { cve: "CVE-2022-2928", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2928", }, { cve: "CVE-2022-2923", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2923", }, { cve: "CVE-2022-2889", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2889", }, { cve: "CVE-2022-2880", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2880", }, { cve: "CVE-2022-2879", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2879", }, { cve: "CVE-2022-2874", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2874", }, { cve: "CVE-2022-2862", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2862", }, { cve: "CVE-2022-2849", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2849", }, { cve: "CVE-2022-2845", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2845", }, { cve: "CVE-2022-28331", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-28331", }, { cve: "CVE-2022-28327", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-28327", }, { cve: "CVE-2022-2819", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2819", }, { cve: "CVE-2022-2817", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2817", }, { cve: "CVE-2022-2816", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2816", }, { cve: "CVE-2022-28131", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-28131", }, { cve: "CVE-2022-27778", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-27778", }, { cve: "CVE-2022-27664", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-27664", }, { cve: "CVE-2022-27536", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-27536", }, { cve: "CVE-2022-27337", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-27337", }, { cve: "CVE-2022-25255", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-25255", }, { cve: "CVE-2022-25147", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-25147", }, { cve: "CVE-2022-24963", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-24963", }, { cve: "CVE-2022-24675", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-24675", }, { cve: "CVE-2022-23521", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-23521", }, { cve: "CVE-2022-2309", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2309", }, { cve: "CVE-2022-21515", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-21515", }, { cve: "CVE-2022-21349", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-21349", }, { cve: "CVE-2022-21291", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-21291", }, { cve: "CVE-2022-1962", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-1962", }, { cve: "CVE-2022-1705", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-1705", }, { cve: "CVE-2022-1292", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-1292", }, { cve: "CVE-2022-1122", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-1122", }, { cve: "CVE-2022-0718", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-0718", }, { cve: "CVE-2021-37750", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2021-37750", }, { cve: "CVE-2021-37519", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2021-37519", }, { cve: "CVE-2021-35940", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2021-35940", }, { cve: "CVE-2021-30860", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2021-30860", }, { cve: "CVE-2021-29338", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2021-29338", }, { cve: "CVE-2018-25032", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2018-25032", }, { cve: "CVE-2017-12613", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2017-12613", }, { cve: "CVE-2006-20001", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2006-20001", }, ], }
wid-sec-w-2023-0385
Vulnerability from csaf_certbund
Published
2023-02-14 23:00
Modified
2023-09-27 22:00
Summary
Mozilla Firefox: Mehrere Schwachstellen ermöglichen Codeausführung
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Firefox ist ein Open Source Web Browser.
ESR ist die Variante mit verlängertem Support.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um Code auszuführen, Sicherheitsmechanismen zu umgehen, den Benutzer zu täuschen, Informationen offenzulegen und andere unbekannte Effekte zu erzielen.
Betroffene Betriebssysteme
- UNIX
- Linux
- MacOS X
- Windows
- Android
- iPhoneOS
{ document: { aggregate_severity: { text: "hoch", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "Firefox ist ein Open Source Web Browser. \r\nESR ist die Variante mit verlängertem Support.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um Code auszuführen, Sicherheitsmechanismen zu umgehen, den Benutzer zu täuschen, Informationen offenzulegen und andere unbekannte Effekte zu erzielen.", title: "Angriff", }, { category: "general", text: "- UNIX\n- Linux\n- MacOS X\n- Windows\n- Android\n- iPhoneOS", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2023-0385 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0385.json", }, { category: "self", summary: "WID-SEC-2023-0385 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0385", }, { category: "external", summary: "Amazon Linux Security Advisory ALASFIREFOX-2023-007 vom 2023-09-27", url: "https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-007.html", }, { category: "external", summary: "ORACLE OVMSA-2023-0014 vom 2023-08-17", url: "https://oss.oracle.com/pipermail/oraclevm-errata/2023-August/001079.html", }, { category: "external", summary: "IBM Security Bulletin 7010099 vom 2023-07-06", url: "https://www.ibm.com/support/pages/node/7010099", }, { category: "external", summary: "Gentoo Linux Security Advisory GLSA-202305-35 vom 2023-05-30", url: "https://security.gentoo.org/glsa/202305-35", }, { category: "external", summary: "Amazon Linux Security Advisory ALAS-2023-1736 vom 2023-05-04", url: "https://alas.aws.amazon.com/ALAS-2023-1736.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:2098 vom 2023-05-03", url: "https://access.redhat.com/errata/RHSA-2023:2098", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1677 vom 2023-04-15", url: "https://access.redhat.com/errata/RHSA-2023:1677", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-12238 vom 2023-04-06", url: "http://linux.oracle.com/errata/ELSA-2023-12238.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1479 vom 2023-03-27", url: "https://access.redhat.com/errata/RHSA-2023:1479", }, { category: "external", summary: "NetApp Security Advisory NTAP-20230324-0008 vom 2023-03-24", url: "https://security.netapp.com/advisory/ntap-20230324-0008/", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1436 vom 2023-03-23", url: "https://access.redhat.com/errata/RHSA-2023:1436", }, { category: "external", summary: "CentOS Security Advisory CESA-2023:1332 vom 2023-03-22", url: "https://lists.centos.org/pipermail/centos-announce/2023-March/086393.html", }, { category: "external", summary: "XEROX Security Advisory XRX23-002 vom 2023-03-23", url: "https://security.business.xerox.com/wp-content/uploads/2023/03/Xerox-Security-Bulletin-XRX23-002-FreeFlow-Print-Server-v2_Windows10.pdf", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1406 vom 2023-03-22", url: "https://access.redhat.com/errata/RHSA-2023:1406", }, { category: "external", summary: "IGEL Security Notice ISN-2023-02 vom 2023-03-22", url: "https://kb.igel.com/securitysafety/en/isn-2023-02-firefox-esr-vulnerabilities-81501314.html", }, { category: "external", summary: "Amazon Linux Security Advisory ALAS-2023-1992 vom 2023-03-22", url: "https://alas.aws.amazon.com/AL2/ALAS-2023-1992.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1370 vom 2023-03-21", url: "https://access.redhat.com/errata/RHSA-2023:1370", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1368 vom 2023-03-21", url: "https://access.redhat.com/errata/RHSA-2023:1368", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1366 vom 2023-03-21", url: "https://access.redhat.com/errata/RHSA-2023:1366", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1369 vom 2023-03-21", url: "https://access.redhat.com/errata/RHSA-2023:1369", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1365 vom 2023-03-21", url: "https://access.redhat.com/errata/RHSA-2023:1365", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-1368 vom 2023-03-22", url: "http://linux.oracle.com/errata/ELSA-2023-1368.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1332 vom 2023-03-20", url: "https://access.redhat.com/errata/RHSA-2023:1332", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-1332 vom 2023-03-20", url: "http://linux.oracle.com/errata/ELSA-2023-1332.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1252 vom 2023-03-15", url: "https://access.redhat.com/errata/RHSA-2023:1252", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-1252 vom 2023-03-15", url: "http://linux.oracle.com/errata/ELSA-2023-1252.html", }, { category: "external", summary: "Ubuntu Security Notice USN-5892-2 vom 2023-03-06", url: "https://ubuntu.com/security/notices/USN-5892-2", }, { category: "external", summary: "Ubuntu Security Notice USN-5880-2 vom 2023-03-01", url: "https://ubuntu.com/security/notices/USN-5880-2", }, { category: "external", summary: "Ubuntu Security Notice USN-5892-1 vom 2023-02-27", url: "https://ubuntu.com/security/notices/USN-5892-1", }, { category: "external", summary: "Mozilla Foundation Security Advisory vom 2023-02-14", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/", }, { category: "external", summary: "Mozilla Foundation Security Advisory vom 2023-02-14", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/", }, { category: "external", summary: "Debian Security Advisory DSA-5350 vom 2023-02-15", url: "https://lists.debian.org/debian-security-announce/2023/msg00039.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0434-1 vom 2023-02-16", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013802.html", }, { category: "external", summary: "Debian Security Advisory DLA-3319 vom 2023-02-16", url: "https://lists.debian.org/debian-lts-announce/2023/02/msg00013.html", }, { category: "external", summary: "Ubuntu Security Notice USN-5880-1 vom 2023-02-20", url: "https://ubuntu.com/security/notices/USN-5880-1", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0443-1 vom 2023-02-17", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013833.html", }, { category: "external", summary: "Debian Security Advisory DSA-5353 vom 2023-02-18", url: "https://www.debian.org/security/2023/dsa-5353", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0812 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0812", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0805 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0805", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0809 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0809", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0806 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0806", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0811 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0811", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0810 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0810", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0808 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0808", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0807 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0807", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0461-1 vom 2023-02-20", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013843.html", }, { category: "external", summary: "Debian Security Advisory DLA-3327 vom 2023-02-20", url: "https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0812 vom 2023-02-21", url: "https://linux.oracle.com/errata/ELSA-2023-0812.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0810 vom 2023-02-21", url: "https://linux.oracle.com/errata/ELSA-2023-0810.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0808 vom 2023-02-20", url: "https://linux.oracle.com/errata/ELSA-2023-0808.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0466-1 vom 2023-02-21", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013853.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0466-1 vom 2023-02-21", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013858.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0468-1 vom 2023-02-21", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013851.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0469-1 vom 2023-02-21", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013850.html", }, { category: "external", summary: "CentOS Security Advisory CESA-2023:0812 vom 2023-02-22", url: "https://lists.centos.org/pipermail/centos-announce/2023-February/086376.html", }, ], source_lang: "en-US", title: "Mozilla Firefox: Mehrere Schwachstellen ermöglichen Codeausführung", tracking: { current_release_date: "2023-09-27T22:00:00.000+00:00", generator: { date: "2024-08-15T17:43:44.523+00:00", engine: { name: "BSI-WID", version: "1.3.5", }, }, id: "WID-SEC-W-2023-0385", initial_release_date: "2023-02-14T23:00:00.000+00:00", revision_history: [ { date: "2023-02-14T23:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, { date: "2023-02-15T23:00:00.000+00:00", number: "2", summary: "Neue Updates von Debian aufgenommen", }, { date: "2023-02-16T23:00:00.000+00:00", number: "3", summary: "Neue Updates von Debian aufgenommen", }, { date: "2023-02-19T23:00:00.000+00:00", number: "4", summary: "Neue Updates von Ubuntu, SUSE und Debian aufgenommen", }, { date: "2023-02-20T23:00:00.000+00:00", number: "5", summary: "Neue Updates von SUSE, Debian und Oracle Linux aufgenommen", }, { date: "2023-02-21T23:00:00.000+00:00", number: "6", summary: "Neue Updates von SUSE aufgenommen", }, { date: "2023-02-22T23:00:00.000+00:00", number: "7", summary: "Neue Updates von CentOS aufgenommen", }, { date: "2023-02-27T23:00:00.000+00:00", number: "8", summary: "Neue Updates von Ubuntu aufgenommen", }, { date: "2023-02-28T23:00:00.000+00:00", number: "9", summary: "Neue Updates von Ubuntu aufgenommen", }, { date: "2023-03-06T23:00:00.000+00:00", number: "10", summary: "Neue Updates von Ubuntu aufgenommen", }, { date: "2023-03-15T23:00:00.000+00:00", number: "11", summary: "Neue Updates von Oracle Linux und Red Hat aufgenommen", }, { date: "2023-03-20T23:00:00.000+00:00", number: "12", summary: "Neue Updates von Oracle Linux und Red Hat aufgenommen", }, { date: "2023-03-21T23:00:00.000+00:00", number: "13", summary: "Neue Updates von Oracle Linux, Red Hat und Amazon aufgenommen", }, { date: "2023-03-22T23:00:00.000+00:00", number: "14", summary: "Neue Updates von IGEL, Red Hat, XEROX und CentOS aufgenommen", }, { date: "2023-03-23T23:00:00.000+00:00", number: "15", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2023-03-26T22:00:00.000+00:00", number: "16", summary: "Neue Updates von NetApp aufgenommen", }, { date: "2023-03-27T22:00:00.000+00:00", number: "17", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2023-04-10T22:00:00.000+00:00", number: "18", summary: "Neue Updates von Oracle Linux aufgenommen", }, { date: "2023-04-16T22:00:00.000+00:00", number: "19", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2023-05-03T22:00:00.000+00:00", number: "20", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2023-05-04T22:00:00.000+00:00", number: "21", summary: "Neue Updates von Amazon aufgenommen", }, { date: "2023-05-29T22:00:00.000+00:00", number: "22", summary: "Neue Updates von Gentoo aufgenommen", }, { date: "2023-07-06T22:00:00.000+00:00", number: "23", summary: "Neue Updates von IBM aufgenommen", }, { date: "2023-08-17T22:00:00.000+00:00", number: "24", summary: "Neue Updates von ORACLE aufgenommen", }, { date: "2023-09-27T22:00:00.000+00:00", number: "25", summary: "Neue Updates von Amazon aufgenommen", }, ], status: "final", version: "25", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Amazon Linux 2", product: { name: "Amazon Linux 2", product_id: "398363", product_identification_helper: { cpe: "cpe:/o:amazon:linux_2:-", }, }, }, ], category: "vendor", name: "Amazon", }, { branches: [ { category: "product_name", name: "Debian Linux", product: { name: "Debian Linux", product_id: "2951", product_identification_helper: { cpe: "cpe:/o:debian:debian_linux:-", }, }, }, ], category: "vendor", name: "Debian", }, { branches: [ { category: "product_name", name: "Gentoo Linux", product: { name: "Gentoo Linux", product_id: "T012167", product_identification_helper: { cpe: "cpe:/o:gentoo:linux:-", }, }, }, ], category: "vendor", name: "Gentoo", }, { branches: [ { category: "product_name", name: "IBM QRadar SIEM 7.5", product: { name: "IBM QRadar SIEM 7.5", product_id: "T022954", product_identification_helper: { cpe: "cpe:/a:ibm:qradar_siem:7.5", }, }, }, ], category: "vendor", name: "IBM", }, { branches: [ { category: "product_name", name: "IGEL OS < 11.08.290", product: { name: "IGEL OS < 11.08.290", product_id: "T026855", product_identification_helper: { cpe: "cpe:/o:igel:os:11.08.290", }, }, }, ], category: "vendor", name: "IGEL", }, { branches: [ { category: "product_name", name: "Mozilla Firefox < 110", product: { name: "Mozilla Firefox < 110", product_id: "T026306", product_identification_helper: { cpe: "cpe:/a:mozilla:firefox:110", }, }, }, { category: "product_name", name: "Mozilla Firefox ESR < 102.8", product: { name: "Mozilla Firefox ESR < 102.8", product_id: "T026307", product_identification_helper: { cpe: "cpe:/a:mozilla:firefox_esr:102.8", }, }, }, ], category: "vendor", name: "Mozilla", }, { branches: [ { category: "product_name", name: "NetApp ActiveIQ Unified Manager", product: { name: "NetApp ActiveIQ Unified Manager", product_id: "658714", product_identification_helper: { cpe: "cpe:/a:netapp:active_iq_unified_manager:-::~~~vmware_vsphere~~", }, }, }, ], category: "vendor", name: "NetApp", }, { branches: [ { category: "product_name", name: "Open Source CentOS", product: { name: "Open Source CentOS", product_id: "1727", product_identification_helper: { cpe: "cpe:/o:centos:centos:-", }, }, }, ], category: "vendor", name: "Open Source", }, { branches: [ { category: "product_name", name: "Oracle Linux", product: { name: "Oracle Linux", product_id: "T004914", product_identification_helper: { cpe: "cpe:/o:oracle:linux:-", }, }, }, { category: "product_name", name: "Oracle VM 3", product: { name: "Oracle VM 3", product_id: "T019617", product_identification_helper: { cpe: "cpe:/a:oracle:vm:3", }, }, }, ], category: "vendor", name: "Oracle", }, { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux", product: { name: "Red Hat Enterprise Linux", product_id: "67646", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:-", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Multicluster Engine", product: { name: "Red Hat Enterprise Linux Multicluster Engine", product_id: "T027598", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:multicluster_engine", }, }, }, ], category: "product_name", name: "Enterprise Linux", }, { category: "product_name", name: "Red Hat Virtualization 4", product: { name: "Red Hat Virtualization 4", product_id: "T026451", product_identification_helper: { cpe: "cpe:/a:redhat:virtualization:4", }, }, }, ], category: "vendor", name: "Red Hat", }, { branches: [ { category: "product_name", name: "SUSE Linux", product: { name: "SUSE Linux", product_id: "T002207", product_identification_helper: { cpe: "cpe:/o:suse:suse_linux:-", }, }, }, ], category: "vendor", name: "SUSE", }, { branches: [ { category: "product_name", name: "Ubuntu Linux", product: { name: "Ubuntu Linux", product_id: "T000126", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:-", }, }, }, ], category: "vendor", name: "Ubuntu", }, { branches: [ { category: "product_name", name: "Xerox FreeFlow Print Server v2", product: { name: "Xerox FreeFlow Print Server v2", product_id: "T014888", product_identification_helper: { cpe: "cpe:/a:xerox:freeflow_print_server:v2", }, }, }, ], category: "vendor", name: "Xerox", }, ], }, vulnerabilities: [ { cve: "CVE-2023-0767", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-0767", }, { cve: "CVE-2023-25728", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25728", }, { cve: "CVE-2023-25729", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25729", }, { cve: "CVE-2023-25730", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25730", }, { cve: "CVE-2023-25731", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25731", }, { cve: "CVE-2023-25732", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25732", }, { cve: "CVE-2023-25733", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25733", }, { cve: "CVE-2023-25734", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25734", }, { cve: "CVE-2023-25735", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25735", }, { cve: "CVE-2023-25736", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25736", }, { cve: "CVE-2023-25737", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25737", }, { cve: "CVE-2023-25738", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25738", }, { cve: "CVE-2023-25739", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25739", }, { cve: "CVE-2023-25740", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25740", }, { cve: "CVE-2023-25741", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25741", }, { cve: "CVE-2023-25742", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25742", }, { cve: "CVE-2023-25743", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25743", }, { cve: "CVE-2023-25744", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25744", }, { cve: "CVE-2023-25745", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25745", }, { cve: "CVE-2023-25746", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25746", }, ], }
WID-SEC-W-2023-0385
Vulnerability from csaf_certbund
Published
2023-02-14 23:00
Modified
2023-09-27 22:00
Summary
Mozilla Firefox: Mehrere Schwachstellen ermöglichen Codeausführung
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Firefox ist ein Open Source Web Browser.
ESR ist die Variante mit verlängertem Support.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um Code auszuführen, Sicherheitsmechanismen zu umgehen, den Benutzer zu täuschen, Informationen offenzulegen und andere unbekannte Effekte zu erzielen.
Betroffene Betriebssysteme
- UNIX
- Linux
- MacOS X
- Windows
- Android
- iPhoneOS
{ document: { aggregate_severity: { text: "hoch", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "Firefox ist ein Open Source Web Browser. \r\nESR ist die Variante mit verlängertem Support.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um Code auszuführen, Sicherheitsmechanismen zu umgehen, den Benutzer zu täuschen, Informationen offenzulegen und andere unbekannte Effekte zu erzielen.", title: "Angriff", }, { category: "general", text: "- UNIX\n- Linux\n- MacOS X\n- Windows\n- Android\n- iPhoneOS", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2023-0385 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0385.json", }, { category: "self", summary: "WID-SEC-2023-0385 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0385", }, { category: "external", summary: "Amazon Linux Security Advisory ALASFIREFOX-2023-007 vom 2023-09-27", url: "https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-007.html", }, { category: "external", summary: "ORACLE OVMSA-2023-0014 vom 2023-08-17", url: "https://oss.oracle.com/pipermail/oraclevm-errata/2023-August/001079.html", }, { category: "external", summary: "IBM Security Bulletin 7010099 vom 2023-07-06", url: "https://www.ibm.com/support/pages/node/7010099", }, { category: "external", summary: "Gentoo Linux Security Advisory GLSA-202305-35 vom 2023-05-30", url: "https://security.gentoo.org/glsa/202305-35", }, { category: "external", summary: "Amazon Linux Security Advisory ALAS-2023-1736 vom 2023-05-04", url: "https://alas.aws.amazon.com/ALAS-2023-1736.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:2098 vom 2023-05-03", url: "https://access.redhat.com/errata/RHSA-2023:2098", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1677 vom 2023-04-15", url: "https://access.redhat.com/errata/RHSA-2023:1677", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-12238 vom 2023-04-06", url: "http://linux.oracle.com/errata/ELSA-2023-12238.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1479 vom 2023-03-27", url: "https://access.redhat.com/errata/RHSA-2023:1479", }, { category: "external", summary: "NetApp Security Advisory NTAP-20230324-0008 vom 2023-03-24", url: "https://security.netapp.com/advisory/ntap-20230324-0008/", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1436 vom 2023-03-23", url: "https://access.redhat.com/errata/RHSA-2023:1436", }, { category: "external", summary: "CentOS Security Advisory CESA-2023:1332 vom 2023-03-22", url: "https://lists.centos.org/pipermail/centos-announce/2023-March/086393.html", }, { category: "external", summary: "XEROX Security Advisory XRX23-002 vom 2023-03-23", url: "https://security.business.xerox.com/wp-content/uploads/2023/03/Xerox-Security-Bulletin-XRX23-002-FreeFlow-Print-Server-v2_Windows10.pdf", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1406 vom 2023-03-22", url: "https://access.redhat.com/errata/RHSA-2023:1406", }, { category: "external", summary: "IGEL Security Notice ISN-2023-02 vom 2023-03-22", url: "https://kb.igel.com/securitysafety/en/isn-2023-02-firefox-esr-vulnerabilities-81501314.html", }, { category: "external", summary: "Amazon Linux Security Advisory ALAS-2023-1992 vom 2023-03-22", url: "https://alas.aws.amazon.com/AL2/ALAS-2023-1992.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1370 vom 2023-03-21", url: "https://access.redhat.com/errata/RHSA-2023:1370", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1368 vom 2023-03-21", url: "https://access.redhat.com/errata/RHSA-2023:1368", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1366 vom 2023-03-21", url: "https://access.redhat.com/errata/RHSA-2023:1366", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1369 vom 2023-03-21", url: "https://access.redhat.com/errata/RHSA-2023:1369", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1365 vom 2023-03-21", url: "https://access.redhat.com/errata/RHSA-2023:1365", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-1368 vom 2023-03-22", url: "http://linux.oracle.com/errata/ELSA-2023-1368.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1332 vom 2023-03-20", url: "https://access.redhat.com/errata/RHSA-2023:1332", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-1332 vom 2023-03-20", url: "http://linux.oracle.com/errata/ELSA-2023-1332.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:1252 vom 2023-03-15", url: "https://access.redhat.com/errata/RHSA-2023:1252", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-1252 vom 2023-03-15", url: "http://linux.oracle.com/errata/ELSA-2023-1252.html", }, { category: "external", summary: "Ubuntu Security Notice USN-5892-2 vom 2023-03-06", url: "https://ubuntu.com/security/notices/USN-5892-2", }, { category: "external", summary: "Ubuntu Security Notice USN-5880-2 vom 2023-03-01", url: "https://ubuntu.com/security/notices/USN-5880-2", }, { category: "external", summary: "Ubuntu Security Notice USN-5892-1 vom 2023-02-27", url: "https://ubuntu.com/security/notices/USN-5892-1", }, { category: "external", summary: "Mozilla Foundation Security Advisory vom 2023-02-14", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/", }, { category: "external", summary: "Mozilla Foundation Security Advisory vom 2023-02-14", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/", }, { category: "external", summary: "Debian Security Advisory DSA-5350 vom 2023-02-15", url: "https://lists.debian.org/debian-security-announce/2023/msg00039.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0434-1 vom 2023-02-16", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013802.html", }, { category: "external", summary: "Debian Security Advisory DLA-3319 vom 2023-02-16", url: "https://lists.debian.org/debian-lts-announce/2023/02/msg00013.html", }, { category: "external", summary: "Ubuntu Security Notice USN-5880-1 vom 2023-02-20", url: "https://ubuntu.com/security/notices/USN-5880-1", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0443-1 vom 2023-02-17", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013833.html", }, { category: "external", summary: "Debian Security Advisory DSA-5353 vom 2023-02-18", url: "https://www.debian.org/security/2023/dsa-5353", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0812 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0812", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0805 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0805", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0809 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0809", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0806 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0806", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0811 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0811", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0810 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0810", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0808 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0808", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0807 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0807", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0461-1 vom 2023-02-20", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013843.html", }, { category: "external", summary: "Debian Security Advisory DLA-3327 vom 2023-02-20", url: "https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0812 vom 2023-02-21", url: "https://linux.oracle.com/errata/ELSA-2023-0812.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0810 vom 2023-02-21", url: "https://linux.oracle.com/errata/ELSA-2023-0810.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0808 vom 2023-02-20", url: "https://linux.oracle.com/errata/ELSA-2023-0808.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0466-1 vom 2023-02-21", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013853.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0466-1 vom 2023-02-21", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013858.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0468-1 vom 2023-02-21", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013851.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0469-1 vom 2023-02-21", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013850.html", }, { category: "external", summary: "CentOS Security Advisory CESA-2023:0812 vom 2023-02-22", url: "https://lists.centos.org/pipermail/centos-announce/2023-February/086376.html", }, ], source_lang: "en-US", title: "Mozilla Firefox: Mehrere Schwachstellen ermöglichen Codeausführung", tracking: { current_release_date: "2023-09-27T22:00:00.000+00:00", generator: { date: "2024-08-15T17:43:44.523+00:00", engine: { name: "BSI-WID", version: "1.3.5", }, }, id: "WID-SEC-W-2023-0385", initial_release_date: "2023-02-14T23:00:00.000+00:00", revision_history: [ { date: "2023-02-14T23:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, { date: "2023-02-15T23:00:00.000+00:00", number: "2", summary: "Neue Updates von Debian aufgenommen", }, { date: "2023-02-16T23:00:00.000+00:00", number: "3", summary: "Neue Updates von Debian aufgenommen", }, { date: "2023-02-19T23:00:00.000+00:00", number: "4", summary: "Neue Updates von Ubuntu, SUSE und Debian aufgenommen", }, { date: "2023-02-20T23:00:00.000+00:00", number: "5", summary: "Neue Updates von SUSE, Debian und Oracle Linux aufgenommen", }, { date: "2023-02-21T23:00:00.000+00:00", number: "6", summary: "Neue Updates von SUSE aufgenommen", }, { date: "2023-02-22T23:00:00.000+00:00", number: "7", summary: "Neue Updates von CentOS aufgenommen", }, { date: "2023-02-27T23:00:00.000+00:00", number: "8", summary: "Neue Updates von Ubuntu aufgenommen", }, { date: "2023-02-28T23:00:00.000+00:00", number: "9", summary: "Neue Updates von Ubuntu aufgenommen", }, { date: "2023-03-06T23:00:00.000+00:00", number: "10", summary: "Neue Updates von Ubuntu aufgenommen", }, { date: "2023-03-15T23:00:00.000+00:00", number: "11", summary: "Neue Updates von Oracle Linux und Red Hat aufgenommen", }, { date: "2023-03-20T23:00:00.000+00:00", number: "12", summary: "Neue Updates von Oracle Linux und Red Hat aufgenommen", }, { date: "2023-03-21T23:00:00.000+00:00", number: "13", summary: "Neue Updates von Oracle Linux, Red Hat und Amazon aufgenommen", }, { date: "2023-03-22T23:00:00.000+00:00", number: "14", summary: "Neue Updates von IGEL, Red Hat, XEROX und CentOS aufgenommen", }, { date: "2023-03-23T23:00:00.000+00:00", number: "15", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2023-03-26T22:00:00.000+00:00", number: "16", summary: "Neue Updates von NetApp aufgenommen", }, { date: "2023-03-27T22:00:00.000+00:00", number: "17", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2023-04-10T22:00:00.000+00:00", number: "18", summary: "Neue Updates von Oracle Linux aufgenommen", }, { date: "2023-04-16T22:00:00.000+00:00", number: "19", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2023-05-03T22:00:00.000+00:00", number: "20", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2023-05-04T22:00:00.000+00:00", number: "21", summary: "Neue Updates von Amazon aufgenommen", }, { date: "2023-05-29T22:00:00.000+00:00", number: "22", summary: "Neue Updates von Gentoo aufgenommen", }, { date: "2023-07-06T22:00:00.000+00:00", number: "23", summary: "Neue Updates von IBM aufgenommen", }, { date: "2023-08-17T22:00:00.000+00:00", number: "24", summary: "Neue Updates von ORACLE aufgenommen", }, { date: "2023-09-27T22:00:00.000+00:00", number: "25", summary: "Neue Updates von Amazon aufgenommen", }, ], status: "final", version: "25", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Amazon Linux 2", product: { name: "Amazon Linux 2", product_id: "398363", product_identification_helper: { cpe: "cpe:/o:amazon:linux_2:-", }, }, }, ], category: "vendor", name: "Amazon", }, { branches: [ { category: "product_name", name: "Debian Linux", product: { name: "Debian Linux", product_id: "2951", product_identification_helper: { cpe: "cpe:/o:debian:debian_linux:-", }, }, }, ], category: "vendor", name: "Debian", }, { branches: [ { category: "product_name", name: "Gentoo Linux", product: { name: "Gentoo Linux", product_id: "T012167", product_identification_helper: { cpe: "cpe:/o:gentoo:linux:-", }, }, }, ], category: "vendor", name: "Gentoo", }, { branches: [ { category: "product_name", name: "IBM QRadar SIEM 7.5", product: { name: "IBM QRadar SIEM 7.5", product_id: "T022954", product_identification_helper: { cpe: "cpe:/a:ibm:qradar_siem:7.5", }, }, }, ], category: "vendor", name: "IBM", }, { branches: [ { category: "product_name", name: "IGEL OS < 11.08.290", product: { name: "IGEL OS < 11.08.290", product_id: "T026855", product_identification_helper: { cpe: "cpe:/o:igel:os:11.08.290", }, }, }, ], category: "vendor", name: "IGEL", }, { branches: [ { category: "product_name", name: "Mozilla Firefox < 110", product: { name: "Mozilla Firefox < 110", product_id: "T026306", product_identification_helper: { cpe: "cpe:/a:mozilla:firefox:110", }, }, }, { category: "product_name", name: "Mozilla Firefox ESR < 102.8", product: { name: "Mozilla Firefox ESR < 102.8", product_id: "T026307", product_identification_helper: { cpe: "cpe:/a:mozilla:firefox_esr:102.8", }, }, }, ], category: "vendor", name: "Mozilla", }, { branches: [ { category: "product_name", name: "NetApp ActiveIQ Unified Manager", product: { name: "NetApp ActiveIQ Unified Manager", product_id: "658714", product_identification_helper: { cpe: "cpe:/a:netapp:active_iq_unified_manager:-::~~~vmware_vsphere~~", }, }, }, ], category: "vendor", name: "NetApp", }, { branches: [ { category: "product_name", name: "Open Source CentOS", product: { name: "Open Source CentOS", product_id: "1727", product_identification_helper: { cpe: "cpe:/o:centos:centos:-", }, }, }, ], category: "vendor", name: "Open Source", }, { branches: [ { category: "product_name", name: "Oracle Linux", product: { name: "Oracle Linux", product_id: "T004914", product_identification_helper: { cpe: "cpe:/o:oracle:linux:-", }, }, }, { category: "product_name", name: "Oracle VM 3", product: { name: "Oracle VM 3", product_id: "T019617", product_identification_helper: { cpe: "cpe:/a:oracle:vm:3", }, }, }, ], category: "vendor", name: "Oracle", }, { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux", product: { name: "Red Hat Enterprise Linux", product_id: "67646", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:-", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Multicluster Engine", product: { name: "Red Hat Enterprise Linux Multicluster Engine", product_id: "T027598", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:multicluster_engine", }, }, }, ], category: "product_name", name: "Enterprise Linux", }, { category: "product_name", name: "Red Hat Virtualization 4", product: { name: "Red Hat Virtualization 4", product_id: "T026451", product_identification_helper: { cpe: "cpe:/a:redhat:virtualization:4", }, }, }, ], category: "vendor", name: "Red Hat", }, { branches: [ { category: "product_name", name: "SUSE Linux", product: { name: "SUSE Linux", product_id: "T002207", product_identification_helper: { cpe: "cpe:/o:suse:suse_linux:-", }, }, }, ], category: "vendor", name: "SUSE", }, { branches: [ { category: "product_name", name: "Ubuntu Linux", product: { name: "Ubuntu Linux", product_id: "T000126", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:-", }, }, }, ], category: "vendor", name: "Ubuntu", }, { branches: [ { category: "product_name", name: "Xerox FreeFlow Print Server v2", product: { name: "Xerox FreeFlow Print Server v2", product_id: "T014888", product_identification_helper: { cpe: "cpe:/a:xerox:freeflow_print_server:v2", }, }, }, ], category: "vendor", name: "Xerox", }, ], }, vulnerabilities: [ { cve: "CVE-2023-0767", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-0767", }, { cve: "CVE-2023-25728", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25728", }, { cve: "CVE-2023-25729", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25729", }, { cve: "CVE-2023-25730", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25730", }, { cve: "CVE-2023-25731", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25731", }, { cve: "CVE-2023-25732", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25732", }, { cve: "CVE-2023-25733", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25733", }, { cve: "CVE-2023-25734", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25734", }, { cve: "CVE-2023-25735", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25735", }, { cve: "CVE-2023-25736", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25736", }, { cve: "CVE-2023-25737", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25737", }, { cve: "CVE-2023-25738", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25738", }, { cve: "CVE-2023-25739", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25739", }, { cve: "CVE-2023-25740", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25740", }, { cve: "CVE-2023-25741", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25741", }, { cve: "CVE-2023-25742", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25742", }, { cve: "CVE-2023-25743", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25743", }, { cve: "CVE-2023-25744", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25744", }, { cve: "CVE-2023-25745", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25745", }, { cve: "CVE-2023-25746", notes: [ { category: "description", text: "In Mozilla Firefox und Mozilla Firefox ESR existieren mehrere Schwachstellen. Zu den Ursachen zählen verschiedene Fehler in der Speicherverwaltung, sowie bei der Behandlung von Richtlinien und fehlende Warnungen. Ein Angreifer kann dadurch Code ausführen, Sicherheitsmechanismen umgehen, den Nutzer täuschen, Informationen offenlegen und weitere, nicht bekannt Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.", }, ], product_status: { known_affected: [ "67646", "T014888", "T012167", "658714", "T004914", "T022954", "2951", "T002207", "T000126", "T026855", "T019617", "398363", "1727", "T026451", "T027598", ], }, release_date: "2023-02-14T23:00:00.000+00:00", title: "CVE-2023-25746", }, ], }
WID-SEC-W-2023-1424
Vulnerability from csaf_certbund
Published
2023-06-12 22:00
Modified
2023-06-12 22:00
Summary
Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
FreeFlow-Druckserver ist eine Druckserveranwendung für Xerox-Produktionsdrucker, die Flexibilität, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.
Betroffene Betriebssysteme
- UNIX
{ document: { aggregate_severity: { text: "hoch", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "FreeFlow-Druckserver ist eine Druckserveranwendung für Xerox-Produktionsdrucker, die Flexibilität, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", title: "Angriff", }, { category: "general", text: "- UNIX", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2023-1424 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1424.json", }, { category: "self", summary: "WID-SEC-2023-1424 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1424", }, { category: "external", summary: "Xerox Security Bulletin vom 2023-06-12", url: "https://securitydocs.business.xerox.com/wp-content/uploads/2023/06/Xerox-Security-Bulletin-XRX23-009-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf", }, ], source_lang: "en-US", title: "Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen", tracking: { current_release_date: "2023-06-12T22:00:00.000+00:00", generator: { date: "2024-08-15T17:52:15.756+00:00", engine: { name: "BSI-WID", version: "1.3.5", }, }, id: "WID-SEC-W-2023-1424", initial_release_date: "2023-06-12T22:00:00.000+00:00", revision_history: [ { date: "2023-06-12T22:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Xerox FreeFlow Print Server v9 for Solaris", product: { name: "Xerox FreeFlow Print Server v9 for Solaris", product_id: "T028053", product_identification_helper: { cpe: "cpe:/a:xerox:freeflow_print_server:v9_for_solaris", }, }, }, ], category: "vendor", name: "Xerox", }, ], }, vulnerabilities: [ { cve: "CVE-2023-28708", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-28708", }, { cve: "CVE-2023-28176", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-28176", }, { cve: "CVE-2023-28164", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-28164", }, { cve: "CVE-2023-28163", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-28163", }, { cve: "CVE-2023-28162", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-28162", }, { cve: "CVE-2023-27522", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-27522", }, { cve: "CVE-2023-25752", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25752", }, { cve: "CVE-2023-25751", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25751", }, { cve: "CVE-2023-25746", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25746", }, { cve: "CVE-2023-25744", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25744", }, { cve: "CVE-2023-25743", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25743", }, { cve: "CVE-2023-25742", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25742", }, { cve: "CVE-2023-25739", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25739", }, { cve: "CVE-2023-25738", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25738", }, { cve: "CVE-2023-25737", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25737", }, { cve: "CVE-2023-25735", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25735", }, { cve: "CVE-2023-25734", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25734", }, { cve: "CVE-2023-25732", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25732", }, { cve: "CVE-2023-25730", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25730", }, { cve: "CVE-2023-25729", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25729", }, { cve: "CVE-2023-25728", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25728", }, { cve: "CVE-2023-25690", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-25690", }, { cve: "CVE-2023-24998", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-24998", }, { cve: "CVE-2023-24807", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-24807", }, { cve: "CVE-2023-24580", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-24580", }, { cve: "CVE-2023-23969", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23969", }, { cve: "CVE-2023-23946", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23946", }, { cve: "CVE-2023-23936", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23936", }, { cve: "CVE-2023-23920", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23920", }, { cve: "CVE-2023-23919", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23919", }, { cve: "CVE-2023-23918", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23918", }, { cve: "CVE-2023-23605", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23605", }, { cve: "CVE-2023-23603", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23603", }, { cve: "CVE-2023-23602", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23602", }, { cve: "CVE-2023-23601", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23601", }, { cve: "CVE-2023-23599", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23599", }, { cve: "CVE-2023-23598", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-23598", }, { cve: "CVE-2023-22809", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-22809", }, { cve: "CVE-2023-22490", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-22490", }, { cve: "CVE-2023-22003", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-22003", }, { cve: "CVE-2023-21985", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21985", }, { cve: "CVE-2023-21984", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21984", }, { cve: "CVE-2023-21928", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21928", }, { cve: "CVE-2023-21896", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21896", }, { cve: "CVE-2023-21843", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21843", }, { cve: "CVE-2023-21840", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21840", }, { cve: "CVE-2023-21830", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-21830", }, { cve: "CVE-2023-0804", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0804", }, { cve: "CVE-2023-0803", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0803", }, { cve: "CVE-2023-0802", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0802", }, { cve: "CVE-2023-0801", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0801", }, { cve: "CVE-2023-0800", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0800", }, { cve: "CVE-2023-0799", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0799", }, { cve: "CVE-2023-0798", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0798", }, { cve: "CVE-2023-0797", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0797", }, { cve: "CVE-2023-0796", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0796", }, { cve: "CVE-2023-0795", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0795", }, { cve: "CVE-2023-0767", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0767", }, { cve: "CVE-2023-0662", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0662", }, { cve: "CVE-2023-0616", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0616", }, { cve: "CVE-2023-0568", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0568", }, { cve: "CVE-2023-0567", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0567", }, { cve: "CVE-2023-0430", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0430", }, { cve: "CVE-2023-0417", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0417", }, { cve: "CVE-2023-0416", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0416", }, { cve: "CVE-2023-0415", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0415", }, { cve: "CVE-2023-0414", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0414", }, { cve: "CVE-2023-0413", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0413", }, { cve: "CVE-2023-0412", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0412", }, { cve: "CVE-2023-0411", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0411", }, { cve: "CVE-2023-0401", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0401", }, { cve: "CVE-2023-0286", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0286", }, { cve: "CVE-2023-0217", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0217", }, { cve: "CVE-2023-0216", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0216", }, { cve: "CVE-2023-0215", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2023-0215", }, { cve: "CVE-2022-48281", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-48281", }, { cve: "CVE-2022-46877", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46877", }, { cve: "CVE-2022-46874", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46874", }, { cve: "CVE-2022-46871", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46871", }, { cve: "CVE-2022-46344", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46344", }, { cve: "CVE-2022-46343", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46343", }, { cve: "CVE-2022-46342", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46342", }, { cve: "CVE-2022-46341", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46341", }, { cve: "CVE-2022-46340", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-46340", }, { cve: "CVE-2022-45939", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-45939", }, { cve: "CVE-2022-45199", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-45199", }, { cve: "CVE-2022-45143", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-45143", }, { cve: "CVE-2022-4450", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-4450", }, { cve: "CVE-2022-4345", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-4345", }, { cve: "CVE-2022-4304", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-4304", }, { cve: "CVE-2022-42919", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42919", }, { cve: "CVE-2022-42916", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42916", }, { cve: "CVE-2022-42915", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42915", }, { cve: "CVE-2022-42898", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42898", }, { cve: "CVE-2022-4283", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-4283", }, { cve: "CVE-2022-4203", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-4203", }, { cve: "CVE-2022-42012", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42012", }, { cve: "CVE-2022-42011", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42011", }, { cve: "CVE-2022-42010", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-42010", }, { cve: "CVE-2022-41903", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-41903", }, { cve: "CVE-2022-41716", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-41716", }, { cve: "CVE-2022-41715", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-41715", }, { cve: "CVE-2022-40898", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-40898", }, { cve: "CVE-2022-40304", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-40304", }, { cve: "CVE-2022-40303", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-40303", }, { cve: "CVE-2022-39253", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-39253", }, { cve: "CVE-2022-3924", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3924", }, { cve: "CVE-2022-38784", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-38784", }, { cve: "CVE-2022-38171", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-38171", }, { cve: "CVE-2022-37436", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-37436", }, { cve: "CVE-2022-3736", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3736", }, { cve: "CVE-2022-3705", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3705", }, { cve: "CVE-2022-36760", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-36760", }, { cve: "CVE-2022-36227", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-36227", }, { cve: "CVE-2022-36114", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-36114", }, { cve: "CVE-2022-36113", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-36113", }, { cve: "CVE-2022-35260", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-35260", }, { cve: "CVE-2022-35252", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-35252", }, { cve: "CVE-2022-3515", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3515", }, { cve: "CVE-2022-3352", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3352", }, { cve: "CVE-2022-3324", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3324", }, { cve: "CVE-2022-3297", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3297", }, { cve: "CVE-2022-3296", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3296", }, { cve: "CVE-2022-3278", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3278", }, { cve: "CVE-2022-3256", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3256", }, { cve: "CVE-2022-3235", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3235", }, { cve: "CVE-2022-3234", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3234", }, { cve: "CVE-2022-32221", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32221", }, { cve: "CVE-2022-32208", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32208", }, { cve: "CVE-2022-32207", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32207", }, { cve: "CVE-2022-32206", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32206", }, { cve: "CVE-2022-32205", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32205", }, { cve: "CVE-2022-32190", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32190", }, { cve: "CVE-2022-32189", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32189", }, { cve: "CVE-2022-32148", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-32148", }, { cve: "CVE-2022-3153", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3153", }, { cve: "CVE-2022-3134", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3134", }, { cve: "CVE-2022-3099", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3099", }, { cve: "CVE-2022-3094", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3094", }, { cve: "CVE-2022-30635", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30635", }, { cve: "CVE-2022-30634", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30634", }, { cve: "CVE-2022-30633", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30633", }, { cve: "CVE-2022-30632", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30632", }, { cve: "CVE-2022-30631", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30631", }, { cve: "CVE-2022-30630", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30630", }, { cve: "CVE-2022-30629", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30629", }, { cve: "CVE-2022-30580", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-30580", }, { cve: "CVE-2022-3037", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3037", }, { cve: "CVE-2022-3016", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-3016", }, { cve: "CVE-2022-29804", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-29804", }, { cve: "CVE-2022-2980", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2980", }, { cve: "CVE-2022-29526", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-29526", }, { cve: "CVE-2022-2946", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2946", }, { cve: "CVE-2022-2929", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2929", }, { cve: "CVE-2022-2928", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2928", }, { cve: "CVE-2022-2923", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2923", }, { cve: "CVE-2022-2889", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2889", }, { cve: "CVE-2022-2880", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2880", }, { cve: "CVE-2022-2879", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2879", }, { cve: "CVE-2022-2874", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2874", }, { cve: "CVE-2022-2862", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2862", }, { cve: "CVE-2022-2849", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2849", }, { cve: "CVE-2022-2845", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2845", }, { cve: "CVE-2022-28331", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-28331", }, { cve: "CVE-2022-28327", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-28327", }, { cve: "CVE-2022-2819", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2819", }, { cve: "CVE-2022-2817", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2817", }, { cve: "CVE-2022-2816", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2816", }, { cve: "CVE-2022-28131", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-28131", }, { cve: "CVE-2022-27778", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-27778", }, { cve: "CVE-2022-27664", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-27664", }, { cve: "CVE-2022-27536", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-27536", }, { cve: "CVE-2022-27337", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-27337", }, { cve: "CVE-2022-25255", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-25255", }, { cve: "CVE-2022-25147", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-25147", }, { cve: "CVE-2022-24963", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-24963", }, { cve: "CVE-2022-24675", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-24675", }, { cve: "CVE-2022-23521", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-23521", }, { cve: "CVE-2022-2309", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-2309", }, { cve: "CVE-2022-21515", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-21515", }, { cve: "CVE-2022-21349", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-21349", }, { cve: "CVE-2022-21291", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-21291", }, { cve: "CVE-2022-1962", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-1962", }, { cve: "CVE-2022-1705", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-1705", }, { cve: "CVE-2022-1292", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-1292", }, { cve: "CVE-2022-1122", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-1122", }, { cve: "CVE-2022-0718", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2022-0718", }, { cve: "CVE-2021-37750", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2021-37750", }, { cve: "CVE-2021-37519", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2021-37519", }, { cve: "CVE-2021-35940", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2021-35940", }, { cve: "CVE-2021-30860", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2021-30860", }, { cve: "CVE-2021-29338", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2021-29338", }, { cve: "CVE-2018-25032", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2018-25032", }, { cve: "CVE-2017-12613", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2017-12613", }, { cve: "CVE-2006-20001", notes: [ { category: "description", text: "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.", }, ], product_status: { known_affected: [ "T028053", ], }, release_date: "2023-06-12T22:00:00.000+00:00", title: "CVE-2006-20001", }, ], }
WID-SEC-W-2023-0407
Vulnerability from csaf_certbund
Published
2023-02-16 23:00
Modified
2023-05-29 22:00
Summary
Mozilla Thunderbird: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Thunderbird ist ein Open Source E-Mail Client.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Informationen falsch darzustellen.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
- Sonstiges
{ document: { aggregate_severity: { text: "mittel", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "Thunderbird ist ein Open Source E-Mail Client.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Informationen falsch darzustellen.", title: "Angriff", }, { category: "general", text: "- UNIX\n- Linux\n- Windows\n- Sonstiges", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2023-0407 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0407.json", }, { category: "self", summary: "WID-SEC-2023-0407 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0407", }, { category: "external", summary: "Gentoo Linux Security Advisory GLSA-202305-36 vom 2023-05-30", url: "https://security.gentoo.org/glsa/202305-36", }, { category: "external", summary: "NetApp Security Advisory NTAP-20230324-0008 vom 2023-03-24", url: "https://security.netapp.com/advisory/ntap-20230324-0008/", }, { category: "external", summary: "XEROX Security Advisory XRX23-002 vom 2023-03-23", url: "https://security.business.xerox.com/wp-content/uploads/2023/03/Xerox-Security-Bulletin-XRX23-002-FreeFlow-Print-Server-v2_Windows10.pdf", }, { category: "external", summary: "Ubuntu Security Notice USN-5943-1 vom 2023-03-13", url: "https://ubuntu.com/security/notices/USN-5943-1", }, { category: "external", summary: "Amazon Linux Security Advisory ALAS2-2023-1983 vom 2023-03-07", url: "https://alas.aws.amazon.com/AL2/ALAS-2023-1983.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0599-1 vom 2023-03-02", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013965.html", }, { category: "external", summary: "Mozilla Foundation Security Advisory 2023-07 vom 2023-02-16", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2023:0443-1 vom 2023-02-17", url: "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013833.html", }, { category: "external", summary: "Debian Security Advisory DSA-5355 vom 2023-02-19", url: "https://www.debian.org/security/2023/dsa-5355", }, { category: "external", summary: "Debian Security Advisory DSA-5353 vom 2023-02-18", url: "https://www.debian.org/security/2023/dsa-5353", }, { category: "external", summary: "Debian Security Advisory DLA-3324 vom 2023-02-20", url: "https://lists.debian.org/debian-lts-announce/2023/02/msg00018.html", }, { category: "external", summary: "Debian Security Advisory DLA-3327 vom 2023-02-20", url: "https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0824 vom 2023-02-21", url: "https://linux.oracle.com/errata/ELSA-2023-0824.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0821 vom 2023-02-20", url: "https://linux.oracle.com/errata/ELSA-2023-0821.html", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2023-0817 vom 2023-02-21", url: "https://linux.oracle.com/errata/ELSA-2023-0817.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0824 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0824", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0823 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0823", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0822 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0822", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0821 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0821", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0820 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0820", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0819 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0819", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0818 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0818", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2023:0817 vom 2023-02-20", url: "https://access.redhat.com/errata/RHSA-2023:0817", }, { category: "external", summary: "CentOS Security Advisory CESA-2023:0817 vom 2023-02-22", url: "https://lists.centos.org/pipermail/centos-announce/2023-February/086375.html", }, ], source_lang: "en-US", title: "Mozilla Thunderbird: Mehrere Schwachstellen", tracking: { current_release_date: "2023-05-29T22:00:00.000+00:00", generator: { date: "2024-08-15T17:43:55.207+00:00", engine: { name: "BSI-WID", version: "1.3.5", }, }, id: "WID-SEC-W-2023-0407", initial_release_date: "2023-02-16T23:00:00.000+00:00", revision_history: [ { date: "2023-02-16T23:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, { date: "2023-02-19T23:00:00.000+00:00", number: "2", summary: "Neue Updates von SUSE, Debian und Fedora aufgenommen", }, { date: "2023-02-20T23:00:00.000+00:00", number: "3", summary: "Neue Updates von Debian, Oracle Linux und Red Hat aufgenommen", }, { date: "2023-02-22T23:00:00.000+00:00", number: "4", summary: "Neue Updates von CentOS aufgenommen", }, { date: "2023-03-02T23:00:00.000+00:00", number: "5", summary: "Neue Updates von SUSE aufgenommen", }, { date: "2023-03-06T23:00:00.000+00:00", number: "6", summary: "Neue Updates von Amazon aufgenommen", }, { date: "2023-03-12T23:00:00.000+00:00", number: "7", summary: "Neue Updates von Ubuntu aufgenommen", }, { date: "2023-03-22T23:00:00.000+00:00", number: "8", summary: "Neue Updates von XEROX aufgenommen", }, { date: "2023-03-26T22:00:00.000+00:00", number: "9", summary: "Neue Updates von NetApp aufgenommen", }, { date: "2023-05-29T22:00:00.000+00:00", number: "10", summary: "Neue Updates von Gentoo aufgenommen", }, ], status: "final", version: "10", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Amazon Linux 2", product: { name: "Amazon Linux 2", product_id: "398363", product_identification_helper: { cpe: "cpe:/o:amazon:linux_2:-", }, }, }, ], category: "vendor", name: "Amazon", }, { branches: [ { category: "product_name", name: "Debian Linux", product: { name: "Debian Linux", product_id: "2951", product_identification_helper: { cpe: "cpe:/o:debian:debian_linux:-", }, }, }, ], category: "vendor", name: "Debian", }, { branches: [ { category: "product_name", name: "Gentoo Linux", product: { name: "Gentoo Linux", product_id: "T012167", product_identification_helper: { cpe: "cpe:/o:gentoo:linux:-", }, }, }, ], category: "vendor", name: "Gentoo", }, { branches: [ { category: "product_name", name: "Mozilla Thunderbird < 102.8", product: { name: "Mozilla Thunderbird < 102.8", product_id: "T026405", product_identification_helper: { cpe: "cpe:/a:mozilla:thunderbird:102.8", }, }, }, ], category: "vendor", name: "Mozilla", }, { branches: [ { category: "product_name", name: "NetApp ActiveIQ Unified Manager", product: { name: "NetApp ActiveIQ Unified Manager", product_id: "658714", product_identification_helper: { cpe: "cpe:/a:netapp:active_iq_unified_manager:-::~~~vmware_vsphere~~", }, }, }, ], category: "vendor", name: "NetApp", }, { branches: [ { category: "product_name", name: "Open Source CentOS", product: { name: "Open Source CentOS", product_id: "1727", product_identification_helper: { cpe: "cpe:/o:centos:centos:-", }, }, }, ], category: "vendor", name: "Open Source", }, { branches: [ { category: "product_name", name: "Oracle Linux", product: { name: "Oracle Linux", product_id: "T004914", product_identification_helper: { cpe: "cpe:/o:oracle:linux:-", }, }, }, ], category: "vendor", name: "Oracle", }, { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux", product: { name: "Red Hat Enterprise Linux", product_id: "67646", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:-", }, }, }, ], category: "vendor", name: "Red Hat", }, { branches: [ { category: "product_name", name: "SUSE Linux", product: { name: "SUSE Linux", product_id: "T002207", product_identification_helper: { cpe: "cpe:/o:suse:suse_linux:-", }, }, }, ], category: "vendor", name: "SUSE", }, { branches: [ { category: "product_name", name: "Ubuntu Linux", product: { name: "Ubuntu Linux", product_id: "T000126", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:-", }, }, }, ], category: "vendor", name: "Ubuntu", }, { branches: [ { category: "product_name", name: "Xerox FreeFlow Print Server v2", product: { name: "Xerox FreeFlow Print Server v2", product_id: "T014888", product_identification_helper: { cpe: "cpe:/a:xerox:freeflow_print_server:v2", }, }, }, ], category: "vendor", name: "Xerox", }, ], }, vulnerabilities: [ { cve: "CVE-2023-0616", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-0616", }, { cve: "CVE-2023-0767", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-0767", }, { cve: "CVE-2023-25728", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25728", }, { cve: "CVE-2023-25729", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25729", }, { cve: "CVE-2023-25730", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25730", }, { cve: "CVE-2023-25732", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25732", }, { cve: "CVE-2023-25734", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25734", }, { cve: "CVE-2023-25735", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25735", }, { cve: "CVE-2023-25737", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25737", }, { cve: "CVE-2023-25738", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25738", }, { cve: "CVE-2023-25739", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25739", }, { cve: "CVE-2023-25742", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25742", }, { cve: "CVE-2023-25746", notes: [ { category: "description", text: "In Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen gehören verschiedene Fehler in der Speicherverwaltung und Richtlinienbehandlung sowie fehlende Warnungen. Infolgedessen kann ein Angreifer Code ausführen, Sicherheitsmechanismen umgehen, falsche Informationen darstellen, Informationen offenlegen und einen Denial-of-Service-Zustand verursachen. Die erfolgreiche Ausnutzung dieser Schwachstellen erfordert eine Benutzerinteraktion.", }, ], product_status: { known_affected: [ "2951", "T002207", "67646", "T000126", "T014888", "398363", "T012167", "658714", "1727", "T004914", ], }, release_date: "2023-02-16T23:00:00.000+00:00", title: "CVE-2023-25746", }, ], }
fkie_cve-2023-25732
Vulnerability from fkie_nvd
Published
2023-06-02 17:15
Modified
2025-01-09 21:15
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| security@mozilla.org | https://bugzilla.mozilla.org/show_bug.cgi?id=1804564 | Issue Tracking, Permissions Required | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2023-06/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2023-07/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.mozilla.org/show_bug.cgi?id=1804564 | Issue Tracking, Permissions Required | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.mozilla.org/security/advisories/mfsa2023-06/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.mozilla.org/security/advisories/mfsa2023-07/ | Vendor Advisory | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://bugzilla.mozilla.org/show_bug.cgi?id=1804564 | Issue Tracking, Permissions Required |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| mozilla | firefox | * | |
| mozilla | firefox_esr | * | |
| mozilla | thunderbird | * |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", matchCriteriaId: "811EBB2F-0FAA-49DB-8B16-99341814C3D1", versionEndExcluding: "110.0", vulnerable: true, }, { criteria: "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", matchCriteriaId: "731649BC-CBBC-4423-93E1-577EF7A17DBD", versionEndExcluding: "102.8", vulnerable: true, }, { criteria: "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", matchCriteriaId: "E7ED1B02-7653-4441-B4F4-980A86C4F170", versionEndExcluding: "102.8", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.", }, ], id: "CVE-2023-25732", lastModified: "2025-01-09T21:15:21.253", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 5.9, source: "134c704f-9b21-4f2e-91b3-4a467353bcc0", type: "Secondary", }, ], }, published: "2023-06-02T17:15:11.193", references: [ { source: "security@mozilla.org", tags: [ "Issue Tracking", "Permissions Required", ], url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", }, { source: "security@mozilla.org", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-05/", }, { source: "security@mozilla.org", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-06/", }, { source: "security@mozilla.org", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-07/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Issue Tracking", "Permissions Required", ], url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-05/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-06/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-07/", }, { source: "134c704f-9b21-4f2e-91b3-4a467353bcc0", tags: [ "Issue Tracking", "Permissions Required", ], url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", }, ], sourceIdentifier: "security@mozilla.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-787", }, ], source: "nvd@nist.gov", type: "Primary", }, { description: [ { lang: "en", value: "CWE-787", }, ], source: "134c704f-9b21-4f2e-91b3-4a467353bcc0", type: "Secondary", }, ], }
gsd-2023-25732
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
Aliases
Aliases
{ GSD: { alias: "CVE-2023-25732", id: "GSD-2023-25732", references: [ "https://www.debian.org/security/2023/dsa-5350", "https://www.debian.org/security/2023/dsa-5355", "https://advisories.mageia.org/CVE-2023-25732.html", "https://access.redhat.com/errata/RHSA-2023:0805", "https://access.redhat.com/errata/RHSA-2023:0806", "https://access.redhat.com/errata/RHSA-2023:0807", "https://access.redhat.com/errata/RHSA-2023:0808", "https://access.redhat.com/errata/RHSA-2023:0809", "https://access.redhat.com/errata/RHSA-2023:0810", "https://access.redhat.com/errata/RHSA-2023:0811", "https://access.redhat.com/errata/RHSA-2023:0812", "https://access.redhat.com/errata/RHSA-2023:0817", "https://access.redhat.com/errata/RHSA-2023:0818", "https://access.redhat.com/errata/RHSA-2023:0819", "https://access.redhat.com/errata/RHSA-2023:0820", "https://access.redhat.com/errata/RHSA-2023:0821", "https://access.redhat.com/errata/RHSA-2023:0822", "https://access.redhat.com/errata/RHSA-2023:0823", "https://access.redhat.com/errata/RHSA-2023:0824", "https://www.suse.com/security/cve/CVE-2023-25732.html", "https://ubuntu.com/security/CVE-2023-25732", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2023-25732", ], details: "When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.", id: "GSD-2023-25732", modified: "2023-12-13T01:20:40.667378Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "security@mozilla.org", ID: "CVE-2023-25732", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Firefox", version: { version_data: [ { version_affected: "<", version_value: "110", }, ], }, }, { product_name: "Thunderbird", version: { version_data: [ { version_affected: "<", version_value: "102.8", }, ], }, }, { product_name: "Firefox ESR", version: { version_data: [ { version_affected: "<", version_value: "102.8", }, ], }, }, ], }, vendor_name: "Mozilla", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "Out of bounds memory write from EncodeInputStream", }, ], }, ], }, references: { reference_data: [ { name: "https://www.mozilla.org/security/advisories/mfsa2023-06/", refsource: "MISC", url: "https://www.mozilla.org/security/advisories/mfsa2023-06/", }, { name: "https://www.mozilla.org/security/advisories/mfsa2023-05/", refsource: "MISC", url: "https://www.mozilla.org/security/advisories/mfsa2023-05/", }, { name: "https://www.mozilla.org/security/advisories/mfsa2023-07/", refsource: "MISC", url: "https://www.mozilla.org/security/advisories/mfsa2023-07/", }, { name: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", refsource: "MISC", url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "102.8", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "102.8", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "110.0", vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "security@mozilla.org", ID: "CVE-2023-25732", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-787", }, ], }, ], }, references: { reference_data: [ { name: "https://www.mozilla.org/security/advisories/mfsa2023-05/", refsource: "MISC", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-05/", }, { name: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", refsource: "MISC", tags: [ "Issue Tracking", "Permissions Required", ], url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", }, { name: "https://www.mozilla.org/security/advisories/mfsa2023-07/", refsource: "MISC", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-07/", }, { name: "https://www.mozilla.org/security/advisories/mfsa2023-06/", refsource: "MISC", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2023-06/", }, ], }, }, impact: { baseMetricV3: { cvssV3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 5.9, }, }, lastModifiedDate: "2023-06-08T15:52Z", publishedDate: "2023-06-02T17:15Z", }, }, }
ghsa-ph4w-hm9p-64qv
Vulnerability from github
Published
2023-06-02 18:30
Modified
2024-04-04 04:29
Severity ?
Details
When encoding data from an inputStream in xpcom the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
{ affected: [], aliases: [ "CVE-2023-25732", ], database_specific: { cwe_ids: [ "CWE-787", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2023-06-02T17:15:11Z", severity: "HIGH", }, details: "When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.", id: "GHSA-ph4w-hm9p-64qv", modified: "2024-04-04T04:29:59Z", published: "2023-06-02T18:30:18Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-25732", }, { type: "WEB", url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1804564", }, { type: "WEB", url: "https://www.mozilla.org/security/advisories/mfsa2023-05", }, { type: "WEB", url: "https://www.mozilla.org/security/advisories/mfsa2023-06", }, { type: "WEB", url: "https://www.mozilla.org/security/advisories/mfsa2023-07", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", type: "CVSS_V3", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.