Red Hat Security Advisory: firefox security update

Fixed packages 3

Vulnerabilities 2

• High 8.1
  CVE-2020-6819 Exploited

  Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020

  KEV Nov 3, 2021
• High 8.1
  CVE-2020-6820 Exploited

  Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020

  KEV Nov 3, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1820869
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1820878
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1341.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6819
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6819
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6819
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/#CVE-2020-6819
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2020-6820
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6820
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6820
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/#CVE-2020-6820