ELSA-2020-1420 — Important: firefox security update (Oracle Linux 7)

Summary

[68.7.0-2.0.1]
- Remove upstream references [Orabug: 30143292]
- Update distribution for Oracle Linux [Orabug: 30143292]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[68.7.0-2]
- Update to 68.7.0 build3

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:68.7.0-2.0.1.el7_8

Vulnerabilities 3

Unscored —

CVE-2020-6821

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
Unscored —

CVE-2020-6822

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
Unscored —

CVE-2020-6825

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020

Important: firefox security update (Oracle Linux 7)

Summary

Fixed packages 1

Vulnerabilities 3

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…