High ELSA-2022-7070 4 CVEs

Important: firefox security update (Oracle Linux 8)

Published Oct 26, 2022 · Updated Oct 26, 2022

Ecosystem: Oracle Linux

Summary

[102.4.0-1.0.1]
- Removed Upstream references
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[102.4.0-1]
- Update to 102.4.0 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	firefox	0:102.4.0-1.0.1.el8_6

Vulnerabilities 4

High 8.8

CVE-2022-42928

Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could hav…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022
High 8.8

CVE-2022-42932

Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Fire…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022
High 8.1

CVE-2022-42927

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redire…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022
Medium 6.5

CVE-2022-42929

If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 22, 2022