Red Hat Security AdvisoryRHSA-2020:3233
firefox security update
Released 2020-07-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) firefox-68.11.0-1.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-68.11.0-1.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-68.11.0-1.el6_10
- Red Hat Enterprise Linux Server (v. 6) firefox-68.11.0-1.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-68.11.0-1.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) firefox-68.11.0-1.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-68.11.0-1.el6_10
Fixes 4 records
Priority MEDIUM 44
Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03265 · Published 2020-05-21 · Partial fix · 81.0.4044.122 CWE-416
Priority MEDIUM 43
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02391 · Published 2020-08-10 · Partial fix · 79, 68.11 +1 CWE-787
Priority LOW 39
Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0779 · Published 2020-07-22 · Partial fix · 84.0.4147.89 CWE-200
Priority LOW 31
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01263 · Published 2020-08-10 · Partial fix · 79, 68.11 +1 CWE-346
THREATIST.IORead the docs