Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

Fedora 38: FEDORA-2023-7342330743 Moderate: IceCat Regex Issues

fedora
Calendar Grey October 18, 2023
Dist Fedora Esm H88
Ubuntu 23.04 introduces LibreOffice 7.5.1 with enhanced functionalities and numerous security patches. Key update highlights included!
- Release 115.3.1

Summary

GNU IceCat is the GNU version of the Firefox ESR browser.

Extensions included to this version of IceCat:

* LibreJS

GNU LibreJS aims to address the JavaScript problem described in the article

"The JavaScript Trap" of Richard Stallman.

* HTTPS Everywhere

HTTPS Everywhere is an extension that encrypts your communications with

many major websites, making your browsing more secure.

* A set of companion extensions for LibreJS by Nathan Nichols

are pre-installed, and provide workarounds to use some services at USPS,

RSF.org, SumOfUs.org, pay.gov, McDonalds, goteo.org and Google Docs

without using nonfree JavaScript.

* A series of configuration changes and tweaks were applied to ensure that

IceCat does not initiate network connections that the user has not explicitly

requested. This implies not downloading feeds, updates, blacklists or any

other similar data needed during startup.

Update Information:

- Release 115.3.1

Topics%20covered

Topics Covered

security advisory network security fedora update moderate issue icecat regex

Change Log

* Mon Oct 2 2023 Antonio Trande - 2:115.3.1-7.rh2 - Add missing installed files * Sun Oct 1 2023 Antonio Trande - 2:115.3.1-6.rh2 - Exclude manpage temporarily * Sun Oct 1 2023 Antonio Trande - 2:115.3.1-5.rh2 - Upload new source archive rh2 * Sat Sep 30 2023 Antonio Trande - 2:115.3.1-4.rh1 - Fix icecatview.html file * Sat Sep 30 2023 Antonio Trande - 2:115.3.1-3.rh1 - Fix files for processing MOZBUILD * Fri Sep 29 2023 Antonio Trande - 2:115.3.1-2.rh1 - Release 115.3.1 rh1| Fix clang path * Fri Sep 29 2023 Antonio Trande - 2:115.3.1-1.rh1 - Release 115.3.1 rh1| Epoch 2

References


[ 1 ] Bug #2208177 - CVE-2023-26117 icecat: angularjs: Regular expression denial of service via the $resource service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2208177 [ 2 ] Bug #2208185 - CVE-2023-26116 icecat: angularjs: Regular Expression Denial of Service via angular.copy() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2208185 [ 3 ] Bug #2208195 - CVE-2023-26118 icecat: angularjs: Regular Expression Denial of Service via the element [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2208195

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-7342330743' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: icecat
Product: Fedora 38
Version: 115.3.1
Release: 7.rh2.fc38
URL:
Summary: GNU version of Firefox browser

Topics%20covered

Topics Covered

security advisory network security fedora update moderate issue icecat regex

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here