1. Home
  2. Security Advisories
  3. AlmaLinux OS
  4. ALSA-2022:8554

[ALSA-2022:8554] firefox security update

Severity Important
Affected Packages 2
CVEs 13
Info Packages References Vulnerabilities

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.5.0 ESR.

Security Fix(es):

  • Mozilla: Service Workers might have learned size of cross-origin media files (CVE-2022-45403)
  • Mozilla: Fullscreen notification bypass (CVE-2022-45404)
  • Mozilla: Use-after-free in InputStream implementation (CVE-2022-45405)
  • Mozilla: Use-after-free of a JavaScript Realm (CVE-2022-45406)
  • Mozilla: Fullscreen notification bypass via windowName (CVE-2022-45408)
  • Mozilla: Use-after-free in Garbage Collection (CVE-2022-45409)
  • Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5 (CVE-2022-45421)
  • Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy (CVE-2022-45410)
  • Mozilla: Cross-Site Tracing was possible via non-standard override headers (CVE-2022-45411)
  • Mozilla: Symlinks may resolve to partially uninitialized buffers (CVE-2022-45412)
  • Mozilla: Keystroke Side-Channel Leakage (CVE-2022-45416)
  • Mozilla: Custom mouse cursor could have been drawn over browser UI (CVE-2022-45418)
  • Mozilla: Iframe contents could be rendered outside the iframe (CVE-2022-45420)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package Affected Version
pkg:rpm/almalinux/firefox?arch=x86_64&distro=almalinux-8.7 < 102.5.0-1.el8_7.alma
pkg:rpm/almalinux/firefox?arch=aarch64&distro=almalinux-8.7 < 102.5.0-1.el8_7.alma
ID
ALSA-2022:8554
Severity
important
URL
https://errata.almalinux.org/ALSA-2022:8554.html
Published
2022-11-21T00:00:00
(22 months ago)
Modified
2022-11-21T21:14:16
(22 months ago)
Rights
Copyright 2022 AlmaLinux OS
Other Advisories
Source # ID Name URL
RHSA RHSA-2022:8554 https://access.redhat.com/errata/RHSA-2022:8554
CVE CVE-2022-45403 https://access.redhat.com/security/cve/CVE-2022-45403
CVE CVE-2022-45404 https://access.redhat.com/security/cve/CVE-2022-45404
CVE CVE-2022-45405 https://access.redhat.com/security/cve/CVE-2022-45405
CVE CVE-2022-45406 https://access.redhat.com/security/cve/CVE-2022-45406
CVE CVE-2022-45408 https://access.redhat.com/security/cve/CVE-2022-45408
CVE CVE-2022-45409 https://access.redhat.com/security/cve/CVE-2022-45409
CVE CVE-2022-45410 https://access.redhat.com/security/cve/CVE-2022-45410
CVE CVE-2022-45411 https://access.redhat.com/security/cve/CVE-2022-45411
CVE CVE-2022-45412 https://access.redhat.com/security/cve/CVE-2022-45412
CVE CVE-2022-45416 https://access.redhat.com/security/cve/CVE-2022-45416
CVE CVE-2022-45418 https://access.redhat.com/security/cve/CVE-2022-45418
CVE CVE-2022-45420 https://access.redhat.com/security/cve/CVE-2022-45420
CVE CVE-2022-45421 https://access.redhat.com/security/cve/CVE-2022-45421
Bugzilla 2143197 https://bugzilla.redhat.com/2143197
Bugzilla 2143198 https://bugzilla.redhat.com/2143198
Bugzilla 2143199 https://bugzilla.redhat.com/2143199
Bugzilla 2143200 https://bugzilla.redhat.com/2143200
Bugzilla 2143201 https://bugzilla.redhat.com/2143201
Bugzilla 2143202 https://bugzilla.redhat.com/2143202
Bugzilla 2143203 https://bugzilla.redhat.com/2143203
Bugzilla 2143204 https://bugzilla.redhat.com/2143204
Bugzilla 2143205 https://bugzilla.redhat.com/2143205
Bugzilla 2143240 https://bugzilla.redhat.com/2143240
Bugzilla 2143241 https://bugzilla.redhat.com/2143241
Bugzilla 2143242 https://bugzilla.redhat.com/2143242
Bugzilla 2143243 https://bugzilla.redhat.com/2143243
Self ALSA-2022:8554 https://errata.almalinux.org/8/ALSA-2022-8554.html
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/almalinux/firefox?arch=x86_64&distro=almalinux-8.7 almalinux firefox < 102.5.0-1.el8_7.alma almalinux-8.7 x86_64
Affected pkg:rpm/almalinux/firefox?arch=aarch64&distro=almalinux-8.7 almalinux firefox < 102.5.0-1.el8_7.alma almalinux-8.7 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date