firefox-60.7.2-1.0.1.el7.AXS7
エラータID: AXSA:2019-3913:03
リリース日:
2019/06/26 Wednesday - 08:47
題名:
firefox-60.7.2-1.0.1.el7.AXS7
影響のあるチャネル:
Asianux Server 7 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- 現時点では CVE-2019-11707, CVE-2019-11708
の情報が公開されておりません。CVE の情報が公開
され次第情報をアップデートいたします。
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2019-11707
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.
CVE-2019-11708
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. This vulnerability affects Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2.
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. This vulnerability affects Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2.
追加情報:
N/A
ダウンロード:
SRPMS
- firefox-60.7.2-1.0.1.el7.AXS7.src.rpm
MD5: 24bcf39fb4ecd349b3e83ccae78376f3
SHA-256: 69bd3558d0f6b4a71aca09617d90bc319cf73b53cd66b3704f89240df62e5332
Size: 416.78 MB
Asianux Server 7 for x86_64
- firefox-60.7.2-1.0.1.el7.AXS7.x86_64.rpm
MD5: bb40073c03ce409b0c7feaddfd408d46
SHA-256: 34965cc31d8fa23a22ebb17007a4ffb4977aefb4d3a1f49c290961bde4996a19
Size: 90.80 MB - firefox-60.7.2-1.0.1.el7.AXS7.i686.rpm
MD5: be6608976da1c039063e3de119bad7aa
SHA-256: 95489fa4732a8efe6ff91bd0628c67f9e2f7170fc8ed5d14769b6a074038eec7
Size: 92.55 MB
English