MGASA-2023-0285

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2023-0285.html

Import Source

https://advisories.mageia.org/MGASA-2023-0285.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2023-0285

Related

Published

2023-10-10T17:21:41Z

Modified

2023-10-10T15:56:17Z

Summary

Updated Firefox and Thunderbird packages fix security vulnerabilities

Details

Updated Firefox and Thunderbird packages fix security vulnerabilities:

Out-of-bounds write in PathOps. (CVE-2023-5169)

Use-after-free in Ion Compiler. (CVE-2023-5171)

Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. (CVE-2023-5176)

Heap buffer overflow in libvpx. (CVE-2023-5217)

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

115.3.1-1.mga9

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

115.3.1-1.mga9

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

115.3.1-1.mga9

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

115.3.1-1.mga9

{
    "section": "core"
}