VDB
ALSA-2022%3A7020
ALSA-2022%3A7020
PUBLISHED
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.3.0 ESR. Security Fix(es): * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:9 | firefox | 0, 0 |
Timeline
- Oct 18, 2022 CVE Published
- Oct 19, 2022 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2022:7020 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2022-40674 third-party-advisory
- https://bugzilla.redhat.com/2130769 third-party-advisory
- https://errata.almalinux.org/9/ALSA-2022-7020.html vendor-advisory