firefox-78.11.0-3.el8.ML.1

エラータID: AXSA:2021-2293:19

Release date: 
Thursday, August 5, 2021 - 06:45
Subject: 
firefox-78.11.0-3.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 78.11.0 ESR.

Security Fix(es):

* Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 (CVE-2021-29967)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2021-29967
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

CVEs: 
CVE-2021-29967
Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and Firefox ESR < 78.11.
Additional Info: 

N/A

Download: 

SRPMS
  1. firefox-78.11.0-3.el8.ML.1.src.rpm
    MD5: b07d246990e9bb7935994e5677a6e169
    SHA-256: 24c8d5f93b5a00b6b564416a84c1c352e19bf77214bce07ff0d1d800c4db3dee
    Size: 672.97 MB

Asianux Server 8 for x86_64
  1. firefox-78.11.0-3.el8.ML.1.x86_64.rpm
    MD5: 688d4704ce13ddb4ff2352ab74974d39
    SHA-256: efa32b57f7bdd941a5e64bcecca2c05a7b7e5c38644ffa2d70d285690aa88625
    Size: 101.77 MB