File _patchinfo of Package patchinfo.32172

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.32172

<patchinfo incident="32172">
  <issue tracker="bnc" id="1218955">VUL-0: MozillaFirefox / MozillaThunderbird: update to 122 and 115.7esr</issue>
  <issue tracker="cve" id="2024-0741"/>
  <issue tracker="cve" id="2024-0742"/>
  <issue tracker="cve" id="2024-0746"/>
  <issue tracker="cve" id="2024-0747"/>
  <issue tracker="cve" id="2024-0749"/>
  <issue tracker="cve" id="2024-0750"/>
  <issue tracker="cve" id="2024-0751"/>
  <issue tracker="cve" id="2024-0753"/>
  <issue tracker="cve" id="2024-0755"/>
  <packager>MSirringhaus</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for MozillaFirefox</summary>
  <description>This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 115.7.0 ESR (MFSA 2024-02) (bsc#1218955):
    
- CVE-2024-0741: Out of bounds write in ANGLE
- CVE-2024-0742: Failure to update user input timestamp
- CVE-2024-0746: Crash when listing printers on Linux
- CVE-2024-0747: Bypass of Content Security Policy when directive unsafe-inline was set
- CVE-2024-0749: Phishing site popup could show local origin in address bar
- CVE-2024-0750: Potential permissions request bypass via clickjacking
- CVE-2024-0751: Privilege escalation through devtools
- CVE-2024-0753: HSTS policy on subdomain could bypass policy of upper domain
- CVE-2024-0755: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.32172

Places