High ELSA-2020-3832 4 CVEs

Important: firefox security update (Oracle Linux 8)

Published Sep 24, 2020 · Updated Sep 24, 2020

Ecosystem: Oracle Linux

Summary

[78.3.0-1.0.1]
- Removed Upstream references
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[78.3.0-1]
- Update to 78.3.0 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	firefox	0:78.3.0-1.0.1.el8_2

Vulnerabilities 4

Unscored —

CVE-2020-15673

Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed ev…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 1, 2020
Unscored —

CVE-2020-15676

Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaSc…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 1, 2020
Unscored —

CVE-2020-15677

By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the dow…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 1, 2020
Unscored —

CVE-2020-15678

When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 1, 2020