ELSA-2020-3556 — Important: firefox security update (Oracle Linux 7)

Summary

[68.12.0-1.0.3]
- Build with rust-toolset 1.43

[68.12.0-1.0.1]
- Remove upstream references [Orabug: 30143292]
- Update distribution for Oracle Linux [Orabug: 30143292]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
- Improve bindgen configuration wrt clang (bmo#1526857)
- Lift MOZ_SMP_FLAGS limit

[68.12.0]
- Update to 68.12.0 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:68.12.0-1.0.3.el7_8

Vulnerabilities 2

Unscored —

CVE-2020-15664

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access …

Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine

Oct 1, 2020
Unscored —

CVE-2020-15669

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. …

Mozilla Thunderbird Firefox ESR thunderbird Browsers Debian Ubuntu

Oct 1, 2020

Important: firefox security update (Oracle Linux 7)

Summary

Fixed packages 1

Vulnerabilities 2

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access …

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. …