ALSA-2022:7071
ALSA-2022:7071 · Important: firefox security update
Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.4.0 ESR. Security Fix(es): * Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927) * Mozilla: Memory Corruption in JS Engine (CVE-2022-42928) * Mozilla: Denial of Service via window.print (CVE-2022-42929) * Mozilla: Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4 (CVE-2022-42932) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Есть исправление
- Опубликовано
- Обновлено
Стек: system
Затронутые продукты и версии
firefox AlmaLinux:9
- Затронутые диапазоны версий
- ECOSYSTEM: < 102.4.0-1.el9_0.alma
Обновитесь до 102.4.0-1.el9_0.alma
Первоисточники
- https://access.redhat.com/errata/RHSA-2022:7071
- https://access.redhat.com/security/cve/CVE-2022-42927
- https://access.redhat.com/security/cve/CVE-2022-42928
- https://access.redhat.com/security/cve/CVE-2022-42929
- https://access.redhat.com/security/cve/CVE-2022-42932
- https://bugzilla.redhat.com/2136156
- https://bugzilla.redhat.com/2136157
- https://bugzilla.redhat.com/2136158
- https://bugzilla.redhat.com/2136159
- https://errata.almalinux.org/9/ALSA-2022-7071.html
- https://osv.dev/vulnerability/ALSA-2022:7071