Red Hat Security Advisory: firefox security update

Fixed packages 6

Vulnerabilities 8

• Unscored —
  CVE-2019-11733

  When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved…

  Mozilla Firefox Firefox ESR firefox Browsers Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11740

  Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11742

  A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters an…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11743

  Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instance…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11744

  Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating the…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11746

  A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. Thi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11752

  It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-9812

  Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by…

  Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu Alpine
  Jan 8, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1745687
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748652
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748653
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748654
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748655
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748656
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748657
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748660
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2729.json
• report
  https://access.redhat.com/security/cve/CVE-2019-9812
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-9812
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-9812
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-9812
• report
  https://access.redhat.com/security/cve/CVE-2019-11733
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11733
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11733
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-24/
• report
  https://access.redhat.com/security/cve/CVE-2019-11740
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11740
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11740
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11740
• report
  https://access.redhat.com/security/cve/CVE-2019-11742
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11742
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11742
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11742
• report
  https://access.redhat.com/security/cve/CVE-2019-11743
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11743
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11743
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11743
• report
  https://access.redhat.com/security/cve/CVE-2019-11744
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11744
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11744
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11744
• report
  https://access.redhat.com/security/cve/CVE-2019-11746
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11746
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11746
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11746