Scientific Linux 安全性更新：SL7.x i686/x86_64 上的 firefox (2021:5014)

high Nessus Plugin ID 155953

語系：

概要

遠端 Scientific Linux 主機缺少一個或多個安全性更新。

說明

遠端 Scientific Linux 7 主機上安裝的套件受到 SLSA-2021: 5014-1 公告中提及的多個弱點影響。

- Mozilla：在 Firefox 95 和 Firefox ESR 已修正記憶體安全性錯誤 91.4 Mozilla：URL leakage when navigating while executing asynchronous function (CVE-2021-43536)

- Mozilla：Heap buffer overflow when using structured clone (CVE-2021-43537)

- Mozilla：Missing fullscreen and pointer lock notification when requesting both (CVE-2021-43538)

- Mozilla：GC rooting failure when calling wasm instance methods (CVE-2021-43539)

- Mozilla：External protocol handler parameters were unescaped (CVE-2021-43541)

- Mozilla：XMLHttpRequest error codes could have leaked the existence of an external protocol handler (CVE-2021-43542)

- Mozilla：Bypass of CSP sandbox directive when embedding (CVE-2021-43543)

- Mozilla：Denial of Service when using the Location API in a loop (CVE-2021-43545)

- Mozilla：Cursor spoofing could overlay user interface when native cursor is zoomed (CVE-2021-43546)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。