RHSA-2023:4461: CVEs fixed (Red Hat)
RHSA-2023:4461 fixes 3 tracked CVEs. Affected systems and fixed versions.
- CVE-2023-4045 MEDIUM 5.3 UPGRADE MITIGATE Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data
- CVE-2023-4050 HIGH 7.5 UPGRADE MITIGATE In some cases, an untrusted input stream was copied to a stack buffer without checking its size
- CVE-2023-4049 MEDIUM 5.9 UPGRADE MITIGATE Race conditions in reference counting code were found through code inspection
Applies to
- RHEL 7 · fixed in firefox-102.14.0-1.el7_9