firefox-78.12.0-1.el8.ML.1
エラータID: AXSA:2021-2303:20
リリース日:
2021/08/10 Tuesday - 04:14
題名:
firefox-78.12.0-1.el8.ML.1
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Firefox や Thunderbird には、悪意のあるページを表示することで、解放後使用や、
メモリー内データの破壊、クラッシュを引き起こす恐れがある脆弱性があります。
(CVE-2021-29970)
- Firefox と Thunderbird には、メモリー内データが破壊される問題があり、この問
題を悪用して任意のコードが実行される脆弱性があります。(CVE-2021-29976）
- Google Chrome の ANGLE には境界外書き込みの問題があり、リモート攻撃者が巧妙
に細工された HTML ページを介して、境界外のメモリーにアクセスされる脆弱性があ
ります。(CVE-2021-30547)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2021-29970
A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered when accessibility was enabled.*. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90.
A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered when accessibility was enabled.*. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90.
CVE-2021-29976
Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90.
Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90.
CVE-2021-30547
Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
追加情報:
N/A
ダウンロード:
SRPMS
- firefox-78.12.0-1.el8.ML.1.src.rpm
MD5: 8353edda11594635c008728f58bae7ce
SHA-256: e8c34d7649fe1e601a04731fb873fceaf4036e2dcb358071a978e35e57275340
Size: 673.66 MB
Asianux Server 8 for x86_64
- firefox-78.12.0-1.el8.ML.1.x86_64.rpm
MD5: c1e913d0587989654a2983a10a3af479
SHA-256: 77c092d94b194edec884d5cadfaa9dc5cabdf0641131da05326b8f471cdb3dbf
Size: 101.73 MB
English