firefox-52.7.3-1.0.1.AXS4

エラータID: AXSA:2018-2955:04

Release date: 
Monday, April 23, 2018 - 10:17
Subject: 
firefox-52.7.3-1.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 52.7.3 ESR.

Security Fix(es):

* firefox: Use-after-free in compositor potentially allows code execution (CVE-2018-5148)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2018-5148
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

CVEs: 
CVE-2018-5148
A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2.
Additional Info: 

N/A

Download: 

SRPMS
  1. firefox-52.7.3-1.0.1.AXS4.src.rpm
    MD5: bfc03f914cf573aab3fcdfcb21d6ea66
    SHA-256: 2788a095862b788e3ea427c763c299e7257befd30bab28f55665603b5b571629
    Size: 369.73 MB

Asianux Server 4 for x86
  1. firefox-52.7.3-1.0.1.AXS4.i686.rpm
    MD5: 255852ce62c4d1c71386cbf4dadf61ed
    SHA-256: b8e1268dfde5cdb3aa831d62ff2c1b0a9b30cbe6708c0e8d5d6fe0b106d759c2
    Size: 79.78 MB

Asianux Server 4 for x86_64
  1. firefox-52.7.3-1.0.1.AXS4.x86_64.rpm
    MD5: 69d65d60b27987a7a98ba186ffcc23f5
    SHA-256: a0a7291fcfa12e26c86e01d4489e3c516c45e325f27e59a794d802e33afaa5ea
    Size: 79.33 MB
  2. firefox-52.7.3-1.0.1.AXS4.i686.rpm
    MD5: 255852ce62c4d1c71386cbf4dadf61ed
    SHA-256: b8e1268dfde5cdb3aa831d62ff2c1b0a9b30cbe6708c0e8d5d6fe0b106d759c2
    Size: 79.78 MB