firefox-102.4.0-1.el8.ML.1
エラータID: AXSA:2022-3915:28
リリース日:
2022/10/25 Tuesday - 08:10
題名:
firefox-102.4.0-1.el8.ML.1
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Firefox および Thunderbird には、同一オリジンポリシー違反に
より、クロスオリジンの URL エントリが盗まれる問題があるため、
performance.getEntries() を介して、リダイレクト結果の漏洩を
可能とする脆弱性が存在します。(CVE-2022-42927)
- Firefox および Thunderbird には、ガベージコレクターが特定の
状態下にある場合でのアノテーションが欠落している特定のタイプ
の割り当てに問題があるため、リモートの攻撃者により、メモリ
破壊やクラッシュに起因するサービス拒否攻撃を可能とする脆弱性
が存在します。(CVE-2022-42928)
- Firefox および Thunderbird には、リモートの攻撃者により、Web
サイトから特定の方法で window.print() を呼び出すことを介して、
サービス拒否攻撃を可能とする脆弱性が存在します。(CVE-2022-42929)
- Firefox および Thunderbird には、メモリ破壊の問題があるため、
リモートの攻撃者により、任意のコード実行を可能とする脆弱性
が存在します。(CVE-2022-42932)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2022-42927
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2022-42928
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2022-42929
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2022-42932
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
追加情報:
N/A
ダウンロード:
SRPMS
- firefox-102.4.0-1.el8.ML.1.src.rpm
MD5: 3befd8a6dee282cab39c080faccfab44
SHA-256: c8fb9b3b72067e69dd056360e9e28edcecc269673f0660d21d427cd5df8c058d
Size: 592.99 MB
Asianux Server 8 for x86_64
- firefox-102.4.0-1.el8.ML.1.x86_64.rpm
MD5: 0eb3b5293b8b6d20f306cae07b4b0a29
SHA-256: 0fe3f71d6a45d5c37a36b9c7f7ecefc12a2c4f100646bd9c15ded42c2df7e547
Size: 108.31 MB
English