ELSA-2020-3253 — Important: firefox security update (Oracle Linux 7)

Summary

[68.11.0-1.0.1]
- Remove upstream references [Orabug: 30143292]
- Update distribution for Oracle Linux [Orabug: 30143292]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

* Thu Jul 23 2020 Jan Horak <jhorak@redhat.com>
- Update to 68.11.0 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:68.11.0-1.0.1.el7_8

Vulnerabilities 4

Unscored —

CVE-2020-15652

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Aug 10, 2020
Unscored —

CVE-2020-15659

Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some o…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Aug 10, 2020
Unscored —

CVE-2020-6463

Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

May 21, 2020
Unscored —

CVE-2020-6514 Public exploit

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged netwo…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 22, 2020

Important: firefox security update (Oracle Linux 7)

Summary

Fixed packages 1

Vulnerabilities 4

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin…

Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some o…

Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap c…

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged netwo…