RHSA-2023:0806: CVEs fixed (Red Hat)

RHSA-2023:0806 fixes 9 tracked CVEs. Affected systems and fixed versions.

CVE-2023-25732 HIGH 8.8 UPGRADE UPGRADE When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded
CVE-2023-25735 HIGH 8.8 UPGRADE UPGRADE Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be s
CVE-2023-25737 HIGH 8.8 UPGRADE UPGRADE An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behav
CVE-2023-25739 HIGH 8.8 UPGRADE UPGRADE Module load requests that failed were not being checked as to whether or not they were cancelled causing a use
CVE-2023-25743 HIGH 7.5 MITIGATE A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing bro
CVE-2023-25728 MEDIUM 6.5 UPGRADE UPGRADE The <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a child iframe's u
CVE-2023-25742 MEDIUM 6.5 UPGRADE UPGRADE When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to c
CVE-2023-25744 HIGH 8.8 UPGRADE UPGRADE Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7
CVE-2023-25746 HIGH 8.8 UPGRADE UPGRADE Memory safety bugs present in Firefox ESR 102.7

Applies to