Red Hat Security Advisory

RHSA-2023:3560

firefox security update

Released 2023-06-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.6) firefox-102.12.0-1.el8_6

Fixes 2 records

TI-2023-17243 CVE-2023-34416 · GHSA-94qw-3pc5-wwcm

Out-of-bounds write in Mozilla Firefox ESR

MEDIUM 44

Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0093 Published 2023-06-19 Partial fix · 102.12, 114 CWE-787

TI-2023-17241 CVE-2023-34414 · GHSA-75j9-5hgg-gprr

Improper certificate validation in Mozilla Firefox ESR

LOW 17

The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks that exploit human response time delays.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00897 Published 2023-06-19 Partial fix · 102.12, 114 CWE-295