Red Hat Security Advisory

RHSA-2020:2380

firefox security update

Released 2020-06-03 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2020-09928 CVE-2020-12410 · GHSA-rc5h-67pm-gm2w

MEDIUM 42

Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01729 Published 2020-07-09 Partial fix · 68.9.0, 77 +1 CWE-787

TI-2020-09924 CVE-2020-12406 · GHSA-cf83-h775-f5f6

MEDIUM 40

Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0102 Published 2020-07-09 Partial fix · 68.9.0, 77 +1 CWE-345

TI-2020-09923 CVE-2020-12405 · GHSA-7768-mfm4-9cmv

LOW 27

When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.01352 Published 2020-07-09 Partial fix · 68.9.0, 77 +1 CWE-362