firefox-60.2.2-1.0.1.el7.AXS7
エラータID: AXSA:2018-3353:07
リリース日:
2018/10/10 Wednesday - 04:47
題名:
firefox-60.2.2-1.0.1.el7.AXS7
影響のあるチャネル:
Asianux Server 7 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- 現時点では CVE-2018-12386, CVE-2018-12387 の情報が公開されておりません。
CVE の情報が公開され次第情報をアップデートいたします。
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2018-12386
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.
CVE-2018-12387
A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.
A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.
追加情報:
N/A
ダウンロード:
SRPMS
- firefox-60.2.2-1.0.1.el7.AXS7.src.rpm
MD5: e2b52af27669950a17354e1aefce9542
SHA-256: 4de4aa1f0d48cd37d8e29aaee6165e521c9f5a83708419d03efae8083b37565c
Size: 415.39 MB
Asianux Server 7 for x86_64
- firefox-60.2.2-1.0.1.el7.AXS7.x86_64.rpm
MD5: c82423cebd17a6983250bffed413c23e
SHA-256: 36a384ff5007104663fea31bde9b9dd1e438a9dcb185864a951133f4013946af
Size: 90.62 MB - firefox-60.2.2-1.0.1.el7.AXS7.i686.rpm
MD5: fab95ac93e27179777ff57d869dec403
SHA-256: 3a4c4b78e9a2dc8fea014ef6b1eafdd2723470de5ea018c6316e9bcc6bc16e90
Size: 92.36 MB
English