Red Hat Security AdvisoryRHSA-2020:1338
firefox security update
Released 2020-04-07 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) firefox-68.6.1-1.el7_8
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-68.6.1-1.el7_8
- Red Hat Enterprise Linux Server (v. 7) firefox-68.6.1-1.el7_8
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-68.6.1-1.el7_8
- Red Hat Enterprise Linux Workstation (v. 7) firefox-68.6.1-1.el7_8
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-68.6.1-1.el7_8
Fixes 2 records
Priority CRITICAL 94KEV
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.07063 · Published 2020-04-24 · Partial fix · 68.7.0, 74.0.1 +1 CWE-362
Priority CRITICAL 94KEV
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.03039 · Published 2020-04-24 · Partial fix · 68.7.0, 74.0.1 +1 CWE-416