RHSA-2023:1442: CVEs fixed (Red Hat)

RHSA-2023:1442 fixes 5 tracked CVEs. Affected systems and fixed versions.

CVE-2023-0767 HIGH 8.8 UPGRADE UPGRADE An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes v
CVE-2023-28176 HIGH 8.8 UPGRADE UPGRADE Memory safety bugs present in Firefox 110 and Firefox ESR 102.8
CVE-2023-25752 MEDIUM 6.5 UPGRADE UPGRADE When accessing throttled streams, the count of available bytes needed to be checked in the calling function to
CVE-2023-28162 HIGH 8.8 UPGRADE UPGRADE While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type
CVE-2023-25751 MEDIUM 6.5 UPGRADE UPGRADE Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritt

Applies to

RHEL 8.1 Update Services for SAP Solutions · fixed in thunderbird-102.9.0-2.el8_1