Read the docs
Red Hat Security Advisory

RHSA-2020:2824

firefox security update

Released 2020-07-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2020-09937 CVE-2020-12419 · GHSA-qfjv-j5f5-wv79

Use after free in Mozilla Firefox ESR

Priority MEDIUM 43

When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02322 Published 2020-07-09 Partial fix · 68.10, 78 +1 CWE-416
TI-2020-09938 CVE-2020-12420 · GHSA-g65h-q52v-q3xv

Race condition in Mozilla Firefox ESR

Priority MEDIUM 42

When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01859 Published 2020-07-09 Partial fix · 68.10, 78 +1 CWE-362
TI-2020-09936 CVE-2020-12418 · GHSA-wqm8-hxqc-qwpc

Out-of-bounds read in Mozilla Firefox ESR

Priority LOW 34

Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03034 Published 2020-07-09 Partial fix · 68.10, 78 +1 CWE-125
TI-2020-09939 CVE-2020-12421 · GHSA-476g-xp34-4rj3

Improper certificate validation in Mozilla Firefox ESR

Priority LOW 33

When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date silently…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01843 Published 2020-07-09 Partial fix · 68.10, 78 +1 CWE-295