< back to search

gpp_maybe Security update for mozillafirefox
SUSE-SLE-SDK-12-SP5-2023-111

This update for MozillaFirefox fixes the following issues: - Updated to version 102.7.0 ESR (bsc#1207119): - CVE-2022-46871: Updated an out of date library (libusrsctp) which contained several vulnerabilities. - CVE-2023-23598: Fixed an arbitrary file read from GTK drag and drop on Linux. - CVE-2023-23601: Fixed a potential spoofing attack when dragging a URL from a cross-origin iframe into the same tab. - CVE-2023-23602: Fixed a mishandled security check, which caused the Content Security Policy header to be ignored for WebSockets in WebWorkers. - CVE-2022-46877: Fixed a fullscreen notification bypass which could be leveraged in spoofing attacks. - CVE-2023-23603: Fixed a Content Security Policy bypass via format directives. - CVE-2023-23605: Fixed several memory safety bugs.

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.5 aarch64
SUSE Linux Enterprise Software Development Kit 12.5 ppc64le
SUSE Linux Enterprise Software Development Kit 12.5 s390x
SUSE Linux Enterprise Software Development Kit 12.5 x86_64