RHSA-2023:1336: CVEs fixed (Red Hat)
RHSA-2023:1336 fixes 4 tracked CVEs. Affected systems and fixed versions.
- CVE-2023-28176 HIGH 8.8 UPGRADE UPGRADE Memory safety bugs present in Firefox 110 and Firefox ESR 102.8
- CVE-2023-25752 MEDIUM 6.5 UPGRADE UPGRADE When accessing throttled streams, the count of available bytes needed to be checked in the calling function to
- CVE-2023-28162 HIGH 8.8 UPGRADE UPGRADE While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type
- CVE-2023-25751 MEDIUM 6.5 UPGRADE UPGRADE Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritt
Applies to
- RHEL 8 · fixed in firefox-102.9.0-3.el8_7