Linux · 
Red Hat · Security advisory · November 27, 2023
Red Hat · Security advisory · November 27, 2023RHSA-2023:7507: Security update for 2 packages
RHSA-2023:7507, released November 27, 2023, fixes 7 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0142
72nd percentile
Priority of the 7 CVEs
Patch now 0
Urgent 0
High 6
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| firefox | RHEL 9 | 0:115.5.0-1.el9_3 |
| firefox-x11 | RHEL 9 | 0:115.5.0-1.el9_3 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2023-6212 | Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. | 8.8 | 0.0095 | None reported |
| High | CVE-2023-6207 | Mozilla Firefox ESR and 5 others: Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox… | 8.8 | 0.0091 | None reported |
| High | CVE-2023-6208 | Mozilla Firefox ESR and 5 others: When using X11, text selected by the page using the Selection API was erroneously copied into the primary… | 8.8 | 0.0089 | None reported |
| High | CVE-2023-6205 | Mozilla Firefox ESR and 5 others: It was possible to cause the use of a MessagePort after it had already been freed, which could potentially… | 7.5 | 0.0087 | None reported |
| High | CVE-2023-6204 | Mozilla Firefox ESR and 5 others: On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds… | 7.5 | 0.0084 | None reported |
| High | CVE-2023-6206 | Mozilla Firefox ESR and 5 others: The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay… | 7.5 | 0.0064 | None reported |
| Routine | CVE-2023-6209 | Mozilla Firefox ESR and 5 others: Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in… | 6.5 | 0.0142 | None reported |
Showing 1 to 7 of 7
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.