firefox-102.3.0-7.0.1.el7.AXS7

エラータID: AXSA:2022-3908:26

Release date: 
Thursday, October 20, 2022 - 10:22
Subject: 
firefox-102.3.0-7.0.1.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.3.0 ESR.

Security Fix(es):

* expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2022-40674
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

Solution: 

Update packages.

CVEs: 
CVE-2022-40674
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
Additional Info: 

N/A

Download: 

SRPMS
  1. firefox-102.3.0-7.0.1.el7.AXS7.src.rpm
    MD5: 4540fa863c6aff20fa5c333d8f5922dc
    SHA-256: 00f66d8b56dc53b263b977d1b6fe3fae34558546570199bba78abd1e7e328767
    Size: 589.36 MB

Asianux Server 7 for x86_64
  1. firefox-102.3.0-7.0.1.el7.AXS7.x86_64.rpm
    MD5: 9d87c286c5e92c3f9d153839ed989fca
    SHA-256: 2f28a700a9da5d6b158800a7b1430b0f99d242f5bce7318b972ca279a8eabb08
    Size: 108.43 MB
  2. firefox-102.3.0-7.0.1.el7.AXS7.i686.rpm
    MD5: 03f7d366819f25f17a3e7291c6fe6831
    SHA-256: bf245f7e81e0f8776b7180695bdb701219ea64c07beef700af28b2435f313c6a
    Size: 111.80 MB