Red Hat Security Advisory: firefox security update

Fixed packages 3

Vulnerabilities 14

• Unscored —
  CVE-2019-11733

  When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved…

  Mozilla Firefox Firefox ESR firefox Browsers Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11735

  Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. Some of …

  Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu
  Sep 27, 2019
• Unscored —
  CVE-2019-11738

  If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as in…

  Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu
  Sep 27, 2019
• Unscored —
  CVE-2019-11740

  Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11742

  A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters an…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11743

  Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instance…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11744

  Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating the…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11746

  A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. Thi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11747

  The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a use…

  Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu
  Sep 27, 2019
• Unscored —
  CVE-2019-11748

  WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even wh…

  Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu
  Sep 27, 2019
• Unscored —
  CVE-2019-11749

  A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using c…

  Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu
  Sep 27, 2019
• Unscored —
  CVE-2019-11750

  A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability aff…

  Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu
  Sep 27, 2019
• Unscored —
  CVE-2019-11752

  It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-9812

  Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by…

  Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu Alpine
  Jan 8, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748652
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748653
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748654
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748655
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748656
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748657
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748660
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748661
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748663
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748664
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748665
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748666
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748667
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2663.json
• report
  https://access.redhat.com/security/cve/CVE-2019-9812
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-9812
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-9812
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-9812
• report
  https://access.redhat.com/security/cve/CVE-2019-11733
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1745687
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11733
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11733
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-24/
• report
  https://access.redhat.com/security/cve/CVE-2019-11735
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11735
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11735
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/#CVE-2019-11735
• report
  https://access.redhat.com/security/cve/CVE-2019-11738
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11738
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11738
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/#CVE-2019-11738
• report
  https://access.redhat.com/security/cve/CVE-2019-11740
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11740
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11740
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11740
• report
  https://access.redhat.com/security/cve/CVE-2019-11742
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11742