Red Hat Security AdvisoryRHSA-2020:0521
firefox security update
Released 2020-02-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) firefox-68.5.0-2.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-68.5.0-2.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-68.5.0-2.el6_10
- Red Hat Enterprise Linux Server (v. 6) firefox-68.5.0-2.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-68.5.0-2.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) firefox-68.5.0-2.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-68.5.0-2.el6_10
Fixes 3 records
Priority MEDIUM 42
Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02263 · Published 2020-03-02 · Partial fix · 68.5, 73 +1 CWE-787
Priority MEDIUM 41
A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01371 · Published 2020-03-02 · Partial fix · 73, ESR68.5 CWE-787
Priority LOW 31
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02046 · Published 2020-03-02 · Partial fix · 68.5, 73 +1 CWE-79