Lucene search

K
oraclelinuxOracleLinuxELSA-2022-0824
HistoryMar 10, 2022 - 12:00 a.m.

firefox security and bug fix update

2022-03-1000:00:00
linux.oracle.com
32

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

[91.7.0-3.0.1]

  • Remove upstream references [Orabug: 30143292]
  • Update distribution for Oracle Linux [Orabug: 30143292]
  • Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
  • Enabled aarch64 build
    [91.7.0-3]
  • Update to 91.7.0 build3
    [91.7.0-2]
  • Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315
    [91.7.0-1]
  • Update to 91.7.0 build2
    [91.6.0-2]
  • Install langpacks to the browser/extensions to make them available in UI:
    rhbz#2030190

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P