High ELSA-2022-6175 5 CVEs

Important: firefox security update (Oracle Linux 8)

Published Aug 25, 2022 · Updated Aug 25, 2022

Ecosystem: Oracle Linux

Summary

[91.13.0-1.0.1]
- Removed Upstream references
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[91.13.0-1]
- Update to 91.13.0 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	firefox	0:91.13.0-1.0.1.el8_6

Vulnerabilities 5

High 8.8

CVE-2022-38473

A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone or…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022
High 8.8

CVE-2022-38477

Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and Fire…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022
High 8.8

CVE-2022-38478

Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022
High 7.5

CVE-2022-38476

A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerabili…

Mozilla Thunderbird Firefox ESR thunderbird Browsers Debian Ubuntu Alpine

Dec 22, 2022
Medium 6.5

CVE-2022-38472

An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which wa…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022