Linux · Security advisory · February 20, 2023

RHSA-2023:0810: Security update for 2 packages

RHSA-2023:0810, released February 20, 2023, fixes 11 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
11
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0074
54th percentile

Priority of the 11 CVEs

Patch now 0 Urgent 0 High 11 Routine 0

Fixed package versions

ProductReleaseFixed in
firefoxRHEL 90:102.8.0-2.el9_1
firefox-x11RHEL 90:102.8.0-2.el9_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-25732 Mozilla Firefox and 4 others: Out-of-bounds Write 8.8 0.0074 None reported
High CVE-2023-25735 Mozilla Firefox and 4 others: Use After Free 8.8 0.0072 None reported
High CVE-2023-25737 Mozilla Firefox and 4 others: Incorrect Type Conversion or Cast 8.8 0.0070 None reported
High CVE-2023-25739 Mozilla Firefox and 4 others: Use After Free 8.8 0.0068 None reported
High CVE-2023-25729 Mozilla Firefox and 4 others: Incorrect Authorization 8.8 0.0068 None reported
High CVE-2023-25744 Mozilla Firefox and 2 others: Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. 8.8 0.0067 None reported
High CVE-2023-25728 Mozilla Firefox and 4 others: Observable Discrepancy 7.5 0.0067 None reported
High CVE-2023-25746 Mozilla Thunderbird and 1 other: Out-of-bounds Write 8.8 0.0067 None reported
High CVE-2023-25743 Mozilla Firefox and 2 others: A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing… 7.5 0.0065 None reported
High CVE-2023-25742 Mozilla Firefox and 4 others: When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the… 7.5 0.0065 None reported
High CVE-2023-25730 Mozilla Firefox and 4 others: Improper Restriction of Rendered UI Layers or Frames 7.5 0.0055 None reported
Showing 1 to 11 of 11 1