Red Hat Security AdvisoryRHSA-2020:2378
firefox security update
Released 2020-06-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) firefox-68.9.0-1.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-68.9.0-1.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-68.9.0-1.el6_10
- Red Hat Enterprise Linux Server (v. 6) firefox-68.9.0-1.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-68.9.0-1.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) firefox-68.9.0-1.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-68.9.0-1.el6_10
Fixes 3 records
Priority MEDIUM 42
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01729 · Published 2020-07-09 · Partial fix · 68.9.0, 77 +1 CWE-787
Priority MEDIUM 40
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0102 · Published 2020-07-09 · Partial fix · 68.9.0, 77 +1 CWE-345
Priority LOW 27
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash.
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.01352 · Published 2020-07-09 · Partial fix · 68.9.0, 77 +1 CWE-362