Red Hat Security AdvisoryRHSA-2020:1339
firefox security update
Released 2020-04-07 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) firefox-68.6.1-1.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-68.6.1-1.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-68.6.1-1.el6_10
- Red Hat Enterprise Linux Server (v. 6) firefox-68.6.1-1.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-68.6.1-1.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) firefox-68.6.1-1.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-68.6.1-1.el6_10
Fixes 2 records
Priority CRITICAL 94KEV
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.07063 · Published 2020-04-24 · Partial fix · 68.7.0, 74.0.1 +1 CWE-362
Priority CRITICAL 94KEV
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.03039 · Published 2020-04-24 · Partial fix · 68.7.0, 74.0.1 +1 CWE-416