ALT-PU-2026-13707

Критический

ALT-PU-2026-13707: package firefox update to version 154.0-alt1

Источник

errata.altlinux.org

Дата публикации

28.08.2026

Дата обновления

24.10.2026

Устраненные уязвимости

195

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades firefox to version 154.0-alt1.

Устраненные уязвимости195

CVE-2026-100757

Высокий 8.8

Дата публикации: 29.09.2026

CWE-416

Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVSS 3.1

Высокий 8.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Ссылки

CVE-2026-100757 https://nvd.nist.gov/vuln/detail/CVE-2026-100757

Ссылки1

ALT-PU-2026-13707 https://errata.altlinux.org/ALT-PU-2026-13707

Связанные уязвимости

openSUSE-SU-2026:21980-1

suse-cvrf

около 1 месяца назад

Security update for MozillaFirefox

SUSE-SU-2026:4545-1

suse-cvrf

около 1 месяца назад

Security update for MozillaFirefox

SUSE-SU-2026:4543-1

suse-cvrf

около 1 месяца назад

Security update for MozillaFirefox

ALT-PU-2026-17945

CVSS3: 9.8

altlinux

18 дней назад

ALT-PU-2026-17945: package `thunderbird` update to version 157.0.1-alt1

ALT-PU-2026-17829

CVSS3: 9.8

altlinux

18 дней назад

ALT-PU-2026-17829: package `firefox` update to version 157.0.1-alt1