firefox-68.7.0-2.0.1.AXS4

エラータID: AXSA:2020-4717:09

Release date: 
Monday, April 20, 2020 - 01:08
Subject: 
firefox-68.7.0-2.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 68.7.0 ESR.

Security Fix(es):

* Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method (CVE-2020-6821)

* Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7 (CVE-2020-6825)

* Mozilla: Out of bounds write in GMPDecodeData when processing large images (CVE-2020-6822)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2020-6821
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2020-6822
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2020-6825
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. firefox-68.7.0-2.0.1.AXS4.src.rpm
    MD5: d425315c9fa3f4114ff156e3145b024f
    SHA-256: f9df45fd8302c4cc90130f8d0a4fedbe3b4534d77e1ad2f97362325651b9ed81
    Size: 504.12 MB

Asianux Server 4 for x86
  1. firefox-68.7.0-2.0.1.AXS4.i686.rpm
    MD5: d839aeb3d277d79be5b3305687f07436
    SHA-256: 30658d6163dad65c63a653768ebaa3071eedd48fa6117aa32db1ac63107c81a4
    Size: 118.42 MB

Asianux Server 4 for x86_64
  1. firefox-68.7.0-2.0.1.AXS4.x86_64.rpm
    MD5: f8fd9af042d1b83350a527386b8558e2
    SHA-256: de65a09a261ddfcfe32427a9708e408b49aef6fb1add0a4f432f3f52c194ba64
    Size: 118.51 MB
  2. firefox-68.7.0-2.0.1.AXS4.i686.rpm
    MD5: d839aeb3d277d79be5b3305687f07436
    SHA-256: 30658d6163dad65c63a653768ebaa3071eedd48fa6117aa32db1ac63107c81a4
    Size: 118.42 MB