firefox 123.0+build3-0ubuntu0.20.04.1: firefox 123.0+build3-0ubuntu0.20.04.1 for Ubuntu 20.04 LTS (focal)

firefox 123.0+build3-0ubuntu0.20.04.1, released February 20, 2024, fixes 12 CVEs in firefox. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0095

61st percentile

Priority of the 12 CVEs

Patch now 0
                                Urgent 0
                                High 7
                                Routine 5

Fixed package versions

Product	Release	Fixed in
firefox	Ubuntu 20.04 LTS (focal)	123.0+build3-0ubuntu0.20.04.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2024-1553	Mozilla Firefox ESR and 5 others: Improper Restriction of Operations within the Bounds of a Memory Buffer	8.1	0.0087	None reported
High	CVE-2024-1546	Mozilla Firefox ESR and 5 others: Out-of-bounds Read	7.5	0.0072	None reported
High	CVE-2024-1547	Mozilla Firefox ESR and 5 others: Authentication Bypass by Spoofing	7.5	0.0068	None reported
High	CVE-2024-1552	firefox: ELSA-2024-0955: firefox security update (IMPORTANT)	7.5	0.0067	None reported
High	CVE-2024-1557	Mozilla Firefox ESR and 3 others: Out-of-bounds Write	8.1	0.0056	None reported
High	CVE-2024-1555	Mozilla Firefox ESR and 3 others: Authentication Bypass by Spoofing	8.3	0.0048	None reported
High	CVE-2024-1554	Mozilla Firefox ESR and 3 others: Insufficient Verification of Data Authenticity	9.8	0.0038	None reported
Routine	CVE-2024-1548	Mozilla Firefox ESR and 5 others: A website could have obscured the fullscreen notification by using a dropdown select input element.	6.1	0.0095	None reported
Routine	CVE-2024-1551	Mozilla Firefox ESR and 5 others: Reliance on Cookies without Validation and Integrity Checking	6.1	0.0074	None reported
Routine	CVE-2024-1550	Mozilla Firefox ESR and 5 others: Improper Restriction of Rendered UI Layers or Frames	6.1	0.0058	None reported
Routine	CVE-2024-1549	Mozilla Firefox ESR and 5 others: If a website set a large custom cursor, portions of the cursor could have overlapped with the permission…	6.1	0.0053	None reported
Routine	CVE-2024-1556	Mozilla Firefox ESR and 3 others: Improper Check for Unusual or Exceptional Conditions	6.5	0.0047	None reported

Also fixes CVE-2024-1553

Mozilla Firefox ESR (ach) 128.3.0
Mozilla Firefox ESR (ach)
Mozilla Firefox ESR (af) 128.3.0
Mozilla Firefox ESR (af)
Mozilla Firefox ESR (an) 128.3.0
Mozilla Firefox ESR (an)
Mozilla Firefox ESR (ar) 128.3.0
Mozilla Firefox ESR (ar)
Mozilla Firefox ESR (ast) 128.3.0
Mozilla Firefox ESR (ast)
Mozilla Firefox ESR (az) 128.3.0
Mozilla Firefox ESR (az)
Mozilla Firefox ESR (be) 128.3.0
Mozilla Firefox ESR (be)
Mozilla Firefox ESR (bg) 128.3.0
Mozilla Firefox ESR (bg)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-123.0-build3-0ubuntu0.20.04.1">firefox 123.0+build3-0ubuntu0.20.04.1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.