Red Hat Security Advisory: firefox security update

Fixed packages 3

Vulnerabilities 7

• Unscored —
  CVE-2019-20503

  usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

  chromium chromium-browser thunderbird firefox Debian Ubuntu Azure Linux Alpine
  Mar 6, 2020
• Unscored —
  CVE-2020-6805

  When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, re…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 25, 2020
• Unscored —
  CVE-2020-6806

  By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resiz…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 25, 2020
• Unscored —
  CVE-2020-6807

  When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been e…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 25, 2020
• Unscored —
  CVE-2020-6811

  The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 25, 2020
• Unscored —
  CVE-2020-6812

  The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 25, 2020
• Unscored —
  CVE-2020-6814

  Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evide…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 25, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1812199
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1812200
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1812201
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1812202
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1812203
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1812204
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1812205
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0820.json
• report
  https://access.redhat.com/security/cve/CVE-2019-20503
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-20503
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-20503
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-09/#CVE-2019-20503
• report
  https://access.redhat.com/security/cve/CVE-2020-6805
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6805
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6805
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-09/#CVE-2020-6805
• report
  https://access.redhat.com/security/cve/CVE-2020-6806
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6806
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6806
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-09/#CVE-2020-6806
• report
  https://access.redhat.com/security/cve/CVE-2020-6807
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6807
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6807
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-09/#CVE-2020-6807
• report
  https://access.redhat.com/security/cve/CVE-2020-6811
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6811
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6811
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-09/#CVE-2020-6811
• report
  https://access.redhat.com/security/cve/CVE-2020-6812
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6812
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6812
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-09/#CVE-2020-6812
• report
  https://access.redhat.com/security/cve/CVE-2020-6814
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6814
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6814
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-09/#CVE-2020-6814