Red Hat Security Advisory

RHSA-2020:1420

firefox security update

Released 2020-04-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) firefox-68.7.0-2.el7_8
Red Hat Enterprise Linux Client Optional (v. 7) firefox-68.7.0-2.el7_8
Red Hat Enterprise Linux Server (v. 7) firefox-68.7.0-2.el7_8
Red Hat Enterprise Linux Server Optional (v. 7) firefox-68.7.0-2.el7_8
Red Hat Enterprise Linux Workstation (v. 7) firefox-68.7.0-2.el7_8
Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-68.7.0-2.el7_8

Fixes 3 records

TI-2020-05534 CVE-2020-6825 · GHSA-pj8r-w3xr-j4w5

Out-of-bounds write in Mozilla Thunderbird

MEDIUM 46

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02188 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-787

TI-2020-05531 CVE-2020-6822 · GHSA-v2mh-4gcf-6ghr

Out-of-bounds write in Mozilla Thunderbird

MEDIUM 41

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecodeData</code>.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01325 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-787

TI-2020-05530 CVE-2020-6821 · GHSA-jj5p-vxx9-rvj7

Use of uninitialized resource in Mozilla Thunderbird

LOW 36

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the returned values be zero.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01505 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-908