FIREFOX ESR 52.7.3 UPDATE

The update is required to fix use-after-free vulnerability. The host is missing a important security update according to Mozilla advisory, MFSA2018-10. This results in a potentially exploitable crash. Phiên bn 52.7. Update Firefox and Thunderbird now Mozilla patches several high risk vulnerabilities. Security Vulnerabilities fixed in Firefox 105 Mozilla. Security Vulnerabilities fixed in Thunderbird 102.3 Mozilla. Mozilla Firefox before 59.0.2 or Firefox ESR before 52.7.3 : A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. Security Vulnerabilities fixed in Firefox ESR 102.3 Mozilla. This update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 : - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malfor. It's just 1 digit to change on line 76 of chocolateyInstall.ps1. The current Firefox ESR is 31.4.0 and the chocolatey package is still in 31.2.0 since Thursday, November 6, 2014. For more information please visit the reference link the Firefox ESR package (firefoxesr) seems to be outdated. The advisory is missing the security advisory description. It was discovered that a use-after-free in the compositor of Firefox can result in the execution of arbitrary code. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2. This results in a potentially exploitable crash. Ī use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. Security Fix: * firefox: Use-after-free in compositor potentially allows code execution For more details about the security issue, incl. This update upgrades Firefox to version 52.7.3 ESR. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Firefox: Mozilla Open Source web browser Firefox could be made to crash or run programs as your login if it opened a malicious website.

Firefox esr 52.7.3