Red Hat Security Advisory

RHSA-2017:3247

firefox security update

Released 2017-11-17 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) firefox-52.5.0-1.el7_4
Red Hat Enterprise Linux Client Optional (v. 7) firefox-52.5.0-1.el7_4
Red Hat Enterprise Linux Desktop (v. 6) firefox-52.5.0-1.el6_9
Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-52.5.0-1.el6_9
Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-52.5.0-1.el6_9
Red Hat Enterprise Linux Server (v. 6) firefox-52.5.0-1.el6_9
Red Hat Enterprise Linux Server (v. 7) firefox-52.5.0-1.el7_4
Red Hat Enterprise Linux Server Optional (v. 6) firefox-52.5.0-1.el6_9, firefox-52.5.0-1.el6_9.ppc
Red Hat Enterprise Linux Server Optional (v. 7) firefox-52.5.0-1.el7_4, firefox-52.5.0-1.el7_4.ppc
Red Hat Enterprise Linux Workstation (v. 6) firefox-52.5.0-1.el6_9
Red Hat Enterprise Linux Workstation (v. 7) firefox-52.5.0-1.el7_4
Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-52.5.0-1.el6_9
Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-52.5.0-1.el7_4
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) firefox-52.5.0-1.el7_4

TI-2017-05445 CVE-2017-7828 · GHSA-f749-pqmw-rvhp

MEDIUM 52

A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in use.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.072 Published 2018-06-11 Fixed in 57, 52.5 CWE-416

TI-2017-05443 CVE-2017-7826 · GHSA-9g7r-5p3c-g4qg

MEDIUM 48

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03335 Published 2018-06-11 Fixed in 57, 52.5 CWE-119

TI-2017-05447 CVE-2017-7830 · GHSA-6j6p-p8wc-9jpp

LOW 33

The Resource Timing API incorrectly revealed navigations in cross-origin iframes.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02404 Published 2018-06-11 Fixed in 57, 52.5