ALT-PU-2023-6436: package firefox-esr update to version 115.3.1-alt4
Описание
This update upgrades firefox-esr to version 115.3.1-alt4.
Устраненные уязвимости183
Ссылки9
GHSA-94vc-p8w7-5p49
https://github.com/advisories/GHSA-94vc-p8w7-5p49GHSA-cxjf-x6jp-p7mc
https://github.com/advisories/GHSA-cxjf-x6jp-p7mcGHSA-j7hp-h8jx-5ppr
https://github.com/advisories/GHSA-j7hp-h8jx-5pprGHSA-jh2j-j4j9-crg3
https://github.com/advisories/GHSA-jh2j-j4j9-crg3GHSA-qqvq-6xgj-jw8g
https://github.com/advisories/GHSA-qqvq-6xgj-jw8gGHSA-qr4w-53vh-m672
https://github.com/advisories/GHSA-qr4w-53vh-m672GHSA-w2pj-9cgh-mq2c
https://github.com/advisories/GHSA-w2pj-9cgh-mq2cGHSA-wqcr-xm43-hpqr
https://github.com/advisories/GHSA-wqcr-xm43-hpqrСвязанные уязвимости
ALT-PU-2023-5754: package `firefox-esr` update to version 115.2.1-alt1
When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox < 103.
When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox < 103.
When loading a script with Subresource Integrity, attackers with an in ...
When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox < 103.