Lucene search
AlmaLinuxALSA-2022:5777HistoryAug 01, 2022 - 12:00 a.m.
Important: firefox security update
2022-08-0100:00:00
errata.almalinux.org
18
firefox
update
version 91.12.0 esr
memory safety
directory indexes
mouse position spoofing
security issues
cve-2022-2505
cve-2022-36318
cve-2022-36319
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
54.9%
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 91.12.0 ESR.
Security Fix(es):
- Mozilla: Memory safety bugs fixed in Firefox 103 and 102.1 (CVE-2022-2505)
- Mozilla: Directory indexes for bundled resources reflected URL parameters (CVE-2022-36318)
- Mozilla: Mouse Position spoofing with CSS transforms (CVE-2022-36319)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | aarch64 | firefox | < 91.12.0-2.el8_6.alma | firefox-91.12.0-2.el8_6.alma.aarch64.rpm |
| almalinux | 8 | x86_64 | firefox | < 91.12.0-2.el8_6.alma | firefox-91.12.0-2.el8_6.alma.x86_64.rpm |
| almalinux | 8 | ppc64le | firefox | < 91.12.0-2.el8_6.alma | firefox-91.12.0-2.el8_6.alma.ppc64le.rpm |
References
Related
oraclelinux
oraclelinux
firefox security update
2022-08-02 00:00:00
firefox security update
2022-08-02 00:00:00
firefox security update
2022-08-02 00:00:00
nessus
nessus
AlmaLinux 8 : thunderbird (5774) (ALSA-2022:5774)
2022-08-06 00:00:00
Oracle Linux 9 : firefox (ELSA-2022-5767)
2022-08-02 00:00:00
Oracle Linux 8 : thunderbird (ELSA-2022-5774)
2022-08-02 00:00:00
rocky
rocky
thunderbird security update
2022-08-01 08:56:13
firefox security update
2022-08-01 09:01:41
almalinux
almalinux
Important: firefox security update
2022-08-01 00:00:00
Important: thunderbird security update
2022-08-01 00:00:00
redhat
redhat
(RHSA-2022:5767) Important: firefox security update
2022-08-01 08:10:05
(RHSA-2022:5765) Important: firefox security update
2022-08-01 07:48:27
(RHSA-2022:5769) Important: firefox security update
2022-08-01 08:44:32
openvas
openvas
Mozilla Firefox ESR Security Advisory (MFSA2022-30) - Mac OS X
2022-07-28 00:00:00
CentOS: Security Advisory for firefox (CESA-2022:5776)
2022-08-05 00:00:00
CentOS: Security Advisory for thunderbird (CESA-2022:5773)
2022-08-05 00:00:00
osv
osv
Important: firefox security update
2022-08-01 09:01:41
Important: firefox security update
2022-08-01 00:00:00
Important: thunderbird security update
2022-08-01 00:00:00
centos
centos
thunderbird security update
2022-08-04 19:07:44
firefox security update
2022-08-04 19:06:29
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 102.1.0-alt1
2022-07-22 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 102.1.0-alt1
2022-08-01 00:00:00
kaspersky
kaspersky
KLA12597 Multiple vulnerabilities in Mozilla Thunderbird
2022-07-28 00:00:00
KLA12595 Multiple vulnerabilities in Mozilla Firefox ESR
2022-07-26 00:00:00
KLA12599 Multiple vulnerabilities in Mozilla Thunderbird
2022-07-28 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 102.1 — Mozilla
2022-07-26 00:00:00
Security Vulnerabilities fixed in Thunderbird 102.1 — Mozilla
2022-07-28 00:00:00
Security Vulnerabilities fixed in Thunderbird 91.12 — Mozilla
2022-07-28 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerability
2022-07-29 23:53:30
Updated thunderbird packages fix security vulnerability
2022-08-26 00:21:07
suse
suse
Security update for MozillaThunderbird (important)
2022-08-10 00:00:00
Security update for MozillaFirefox (important)
2022-08-01 00:00:00
Security update for MozillaThunderbird (important)
2022-09-15 00:00:00
debian
debian
[SECURITY] [DSA 5195-1] thunderbird security update
2022-07-30 18:13:05
[SECURITY] [DSA 5193-1] firefox-esr security update
2022-07-27 18:06:44
ubuntu
ubuntu
Firefox vulnerabilities
2022-07-28 00:00:00
Thunderbird vulnerabilities
2022-10-07 00:00:00
amazon
amazon
Important: thunderbird
2022-09-30 07:04:00
prion
prion
Design/Logic Flaw
2022-12-22 20:15:00
Design/Logic Flaw
2022-12-22 20:15:00
Memory corruption
2022-12-22 20:15:00
ubuntucve
ubuntucve
cve
cve
nvd
nvd
debiancve
debiancve
redhatcve
redhatcve
alpinelinux
alpinelinux
veracode
veracode
Spoofing Attacks
2022-07-30 06:33:23
Cross-site Scripting (XSS)
2022-07-30 06:33:48
Denial Of Service (DoS)
2022-07-29 22:46:54
cvelist
cvelist
cnvd
cnvd
Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2023-06860)
2022-07-28 00:00:00
redos
redos
ROS-20221007-05
2022-10-07 00:00:00
ROS-20221007-04
2022-10-07 00:00:00
ibm
ibm
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2022-08-10 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
54.9%
Related for ALSA-2022:5777