File _patchinfo of Package patchinfo.32655

<patchinfo incident="32655">
  <issue tracker="bnc" id="1184272">MozillaFirefox should recommend what is needed to support WebAuthn with U2F by default</issue>
  <issue tracker="bnc" id="1220048">VUL-0: MozillaFirefox / MozillaThunderbird: update to 123 and 115.8esr</issue>
  <issue tracker="cve" id="2024-1546"/>
  <issue tracker="cve" id="2024-1547"/>
  <issue tracker="cve" id="2024-1548"/>
  <issue tracker="cve" id="2024-1549"/>
  <issue tracker="cve" id="2024-1550"/>
  <issue tracker="cve" id="2024-1551"/>
  <issue tracker="cve" id="2024-1552"/>
  <issue tracker="cve" id="2024-1553"/>
  <packager>MSirringhaus</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for MozillaFirefox</summary>
  <description>This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 115.8.0 ESR (MFSA 2024-06) (bsc#1220048):

- CVE-2024-1546: Out-of-bounds memory read in networking channels
- CVE-2024-1547: Alert dialog could have been spoofed on another site
- CVE-2024-1548: Fullscreen Notification could have been hidden by select element
- CVE-2024-1549: Custom cursor could obscure the permission dialog
- CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants
- CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in response parts
- CVE-2024-1552: Incorrect code generation on 32-bit ARM devices
- CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8

- Recommend libfido2-udev on codestreams that exist, in order to try
  to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)
</description>
</patchinfo>