Bug 2245906 (CVE-2023-5730)
| Summary: | CVE-2023-5730 Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Mauro Matteo Cascella <mcascell> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | firefox 115.4, thunderbird 115.4.1 | Doc Type: | --- |
| Doc Text: |
The Mozilla Foundation Security Advisory describes this flaw as:
Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2245887 | ||
|
Description
Mauro Matteo Cascella
2023-10-24 14:22:13 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2023:6162 https://access.redhat.com/errata/RHSA-2023:6162 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Advanced Update Support Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Red Hat Enterprise Linux 8.2 Telecommunications Update Service Via RHSA-2023:6185 https://access.redhat.com/errata/RHSA-2023:6185 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:6188 https://access.redhat.com/errata/RHSA-2023:6188 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Extended Update Support Via RHSA-2023:6186 https://access.redhat.com/errata/RHSA-2023:6186 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions Via RHSA-2023:6189 https://access.redhat.com/errata/RHSA-2023:6189 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2023:6187 https://access.redhat.com/errata/RHSA-2023:6187 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:6191 https://access.redhat.com/errata/RHSA-2023:6191 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2023:6193 https://access.redhat.com/errata/RHSA-2023:6193 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2023:6194 https://access.redhat.com/errata/RHSA-2023:6194 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Advanced Update Support Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Red Hat Enterprise Linux 8.2 Telecommunications Update Service Via RHSA-2023:6197 https://access.redhat.com/errata/RHSA-2023:6197 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions Via RHSA-2023:6198 https://access.redhat.com/errata/RHSA-2023:6198 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Extended Update Support Via RHSA-2023:6195 https://access.redhat.com/errata/RHSA-2023:6195 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Extended Update Support Via RHSA-2023:6199 https://access.redhat.com/errata/RHSA-2023:6199 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat Enterprise Linux 8.4 Telecommunications Update Service Via RHSA-2023:6196 https://access.redhat.com/errata/RHSA-2023:6196 |