Red Hat Bug Fix Advisory: Updated rhel9/firefox-flatpak container image
An updated rhel9/firefox-flatpak container image is now available in the Red Hat container registry.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-4863US | high8.8OT critical | KEV | ||
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML pag… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Fixedrhel9/firefox-flatpak@sha256:ef71228c905275b0c973e231942a1949b2036217cf0ed7e671ea1a9dded66fbd_amd64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
To install and use Red Hat Enterprise Linux Flatpak content available in the the Red Hat Container Catalog, make sure that you have the latest version of the Flatpak client installed on your system: yum update flatpak After updating the Flatpak packages, add the Flatpak remote to your system: flatpak remote-add rhel https://flatpaks.redhat.io/rhel.flatpakrepo Provide the credentials for your Red Hat Enterprise Linux account: podman login registry.redhat.io Podman only saves credentials until the user logs out. To save your credentials permanently, run: cp $XDG_RUNTIME_DIR/containers/auth.json $HOME/.config/flatpak/oci-auth.json To enable the RHEL Flatpak remote for a set of workstations within an organization, you should use a Registry Service Account. Credentials can be installed system-wide at /etc/flatpak/oci-auth.json. Then, you can install the Firefox Flatpak container image: flatpak install rhel org.firefox.Firefox For more information about the image, search the <image_name> in the Red Hat Ecosystem Catalog: https://catalog.redhat.com/software/containers/search.
https://access.redhat.com/errata/RHBA-2023:5988 - Workaroundrhel9/firefox-flatpak@sha256:ef71228c905275b0c973e231942a1949b2036217cf0ed7e671ea1a9dded66fbd_amd64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan