Release firefox-153.5.0-1.el10_2 ALSA-2026:89758
Nessuno ha ancora preso questa issue.
Valutazione
- Difficoltà
- 4/5
- Tempo stimato
- Più di una settimana
- Idoneità per principianti
- 10/100
- Tipo di issue
- Bug
- Chiarezza
- Da chiarire
- Stato di attività
- Attiva
- Stack tecnologico
- linux
- Ambito
- release
Direzione di ricerca
This is a release tracking issue for the firefox-153.5.0-1.el10_2 package on AlmaLinux, listing security fixes such as CVE-2026-45186 in libexpat and several firefox CVEs. The issue names no file, test or entry point to change, so a newcomer has no starting point. Done would mean the packages are built, tested and published for each listed architecture, which is maintainer work.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Descrizione
firefox security, bug fix, and enhancement update
Severity: Important
Description
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
Security Fix(es):
- libexpat: denial of service via crafted XML input (CVE-2026-45186)
- expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer (CVE-2026-77214)
- firefox: thunderbird: Privilege escalation in the Application Update component (CVE-2026-109704)
- firefox: Use-after-free in the XML component (CVE-2026-109718)
- firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109715)
- firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget (CVE-2026-109740)
- firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-109706)
- firefox: Use-after-free in the Crash Reporting component (CVE-2026-109713)
- firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-109724)
- firefox: Information disclosure, privilege escalation in the Security: Process Sandboxing component (CVE-2026-109709)
- firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (CVE-2026-109705)
- firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-109729)
- firefox: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-109716)
- firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component (CVE-2026-109719)
- firefox: Integer overflow in the Layout: Text and Fonts component (CVE-2026-109723)
- firefox: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-109708)
- firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-109717)
- firefox: Sandbox escape due to use-after-free in the Networking component (CVE-2026-109707)
- firefox: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-109720)
- firefox: Use-after-free in the SVG component (CVE-2026-109726)
- firefox: Integer overflow in the Graphics component (CVE-2026-109730)
- firefox: Use-after-free in the Audio/Video component (CVE-2026-109727)
- firefox: Use-after-free in the DOM: Streams component (CVE-2026-109732)
- firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-109725)
- firefox: Sandbox escape due to uninitialized memory in the Graphics component (CVE-2026-109712)
- firefox: Use-after-free in the Graphics: Canvas2D component (CVE-2026-109711)
- firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-109722)
- firefox: Use-after-free in the DOM: Animation component (CVE-2026-109728)
- firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-109721)
Bug Fix(es) and Enhancement(s):
- Firefox ESR 153 rebase [rhel-10.2.z] (JIRA:RHEL-175166)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
firefox-153.5.0-1.el10_2.x86_64
firefox-153.5.0-1.el10_2.s390x
firefox-153.5.0-1.el10_2.ppc64le
firefox-153.5.0-1.el10_2.aarch64
firefox-153.5.0-1.el10_2.x86_64_v2
- Lingua principale
- Nessun dato sulla lingua
- Stelle
- 2
- Fork
- 0
- Metriche di merge delle PR
- Nessuna PR unita negli ultimi 30g
Preparare l'ambiente
- Nessun Dockerfile né file Docker Compose
- Nessun modello di pull request
- Leggi la guida per i contributori
Come iniziare
- Leggi tutta la issue e poi la guida ai contributi del progetto.
- Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
- Fai un fork del repository e lavora su un branch.
- Apri una pull request che faccia riferimento al numero della issue.
Altre issue di AlmaLinux/updates
-
Difficoltà 1/5 Meno di un'ora Idoneità per principianti 62/100
-
Difficoltà 1/5 Meno di un'ora Idoneità per principianti 85/100
-
Difficoltà 1/5 Meno di un'ora Idoneità per principianti 60/100
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 62/100
-
Difficoltà 5/5 Più di una settimana Idoneità per principianti 5/100
Tutte le issue di AlmaLinux/updates
Issue simili
-
Difficoltà 1/5 Meno di un'ora Idoneità per principianti 65/100
I maintainer di solito rispondono entro 1 giorno
-
triage
Difficoltà 2/5 1-3 ore Idoneità per principianti 82/100
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 68/100
hashicorp/homebrew-tap#433 ·
-
snap version is behindApertabug
Difficoltà 2/5 1-3 ore Idoneità per principianti 65/100
I maintainer di solito rispondono entro 1 giorno
-
area: contributor-guides area: documentation ci-cd devops difficulty: easy docs documentation dx good first issue guide hacktoberfest help wanted island: Docs Harbor rank: 8 kyu
Difficoltà 2/5 1-3 ore Idoneità per principianti 80/100
tdk-landscape/tdk-cli-core#3099 ·