ELSA-2022-5776 — Important: firefox security update (Oracle Linux 7)

Summary

[91.12.0-2.0.1]
- Remove upstream references [Orabug: 30143292]
- Update distribution for Oracle Linux [Orabug: 30143292]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
- Enabled aarch64 build

[91.12.0-1]
- Update to 91.12.0 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:91.12.0-2.0.1.el7_9

Vulnerabilities 3

High 8.8

CVE-2022-2505

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022
High 7.5

CVE-2022-36319

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates th…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022
Medium 5.3

CVE-2022-36318

When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerabilit…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022

Important: firefox security update (Oracle Linux 7)

Summary

Fixed packages 1

Vulnerabilities 3

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs …

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates th…

When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerabilit…