ELSA-2020-2031 — Critical: firefox security update (Oracle Linux 8)

Summary

[68.8.0-1.0.1.el8_2]
- Rebuild to pickup Oracle default bookmarks [Orabug: 30069264]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
- Remove upstream references [Orabug: 30530527]

* Wed Apr 29 2020 Jan Horak <jhorak@redhat.com>
- Update to 68.8.0 build1

[68.7.0-3]
- Added fix for rhbz#1821418

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	firefox	0:68.8.0-1.0.1.el8_2

Vulnerabilities 4

Unscored —

CVE-2020-12387

A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a po…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

May 26, 2020
Unscored —

CVE-2020-12392

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

May 26, 2020
Unscored —

CVE-2020-12395

Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some o…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

May 26, 2020
Unscored —

CVE-2020-6831

A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corrupti…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

May 26, 2020

Critical: firefox security update (Oracle Linux 8)

Summary

Fixed packages 1

Vulnerabilities 4

A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a po…

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can …

Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some o…

A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corrupti…