Lucene search

K
oraclelinuxOracleLinuxELSA-2020-0521
HistoryJul 07, 2020 - 12:00 a.m.

firefox security update

2020-07-0700:00:00
linux.oracle.com
19

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

[68.5.0-2.0.1]

  • fix LD_LIBRARY_PATH
  • Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one
  • Fri Feb 07 2020 Jan Horak
  • Update to 68.5.0 build2
  • Wed Feb 05 2020 Jan Horak
  • Update to 68.5.0 build1
  • Wed Jan 08 2020 Jan Horak
  • Update to 68.4.1esr build1
  • Fri Jan 03 2020 Jan Horak
  • Update to 68.4.0esr build1
  • Wed Dec 18 2019 Jan Horak
  • Fix for wrong intl.accept_lang when using non en-us langpack
    [68.3.0-1]
  • Update to 68.3.0 ESR
    [68.2.0-4]
  • Added patch for TLS 1.3 support.
    [68.2.0-3]
  • Rebuild
    [68.2.0-2]
  • Rebuild
    [68.2.0-1]
  • Update to 68.2.0 ESR
    [68.1.0-6]
  • Enable system nss on RHEL6
    [68.1.0-2]
  • Enable building langpacks
    [68.1.0-1]
  • Update to 68.1.0 ESR
    [68.0.1-4]
  • Enable system nss
    [68.0.1-3]
  • Enable official branding
    [68.0.1-2]
  • Enabled PipeWire on RHEL8
    [68.0.1-1]
  • Updated to 68.0.1 ESR
    [68.0-0.11]
  • Update to 68.0 ESR
    [68.0-0.10]
  • Updated to 68.0 alpha 13
  • Enabled second arches
    [68.0-0.1]
  • Updated to 68.0 alpha
    [60.6.0-3]
  • Added Google API keys (mozbz#1531176)
    [60.6.0-2]
  • Update to 60.6.0 ESR (Build 2)
    [60.6.0-1]
  • Update to 60.6.0 ESR (Build 1)
    [60.5.1-1]
  • Update to 60.5.1 ESR
    [60.5.0-3]
  • Added fix for rhbz#1672424 - Firefox crashes on NFS drives.
    [60.5.0-2]
  • Updated to 60.5.0 ESR build2
    [60.5.0-1]
  • Updated to 60.5.0 ESR build1
    [60.4.0-3]
  • Fixing fontconfig warnings (rhbz#1601475)
    [60.4.0-2]
  • Added pipewire patch from Tomas Popela (rhbz#1664270)
    [60.4.0-1]
  • Update to 60.4.0 ESR
    [60.3.0-2]
  • Added firefox-gnome-shell-extension
    [60.3.0-1]
  • Update to 60.3.0 ESR
    [60.2.2-2]
  • Added patch for rhbz#1633932
    [60.2.2-1]
  • Update to 60.2.2 ESR
    [60.2.1-1]
  • Update to 60.2.1 ESR
    [60.2.0-1]
  • Update to 60.2.0 ESR
    [60.1.0-9]
  • Do not set user agent (rhbz#1608065)
  • GTK dialogs are localized now (rhbz#1619373)
  • JNLP association works again (rhbz#1607457)
    [60.1.0-8]
  • Fixed homepage and bookmarks (rhbz#1606778)
  • Fixed missing file associations in RHEL6 (rhbz#1613565)
    [60.1.0-7]
  • Run at-spi-bus if not running already (for the bundled gtk3)
    [60.1.0-6]
  • Fix for missing schemes for bundled gtk3
    [60.1.0-5]
  • Added mesa-libEGL dependency to gtk3/rhel6
    [60.1.0-4]
  • Disabled jemalloc on all second arches
    [60.1.0-3]
  • Updated to 60.1.0 ESR build2
    [60.1.0-2]
  • Disabled jemalloc on second arches
    [60.1.0-1]
  • Updated to 60.1.0 ESR
    [60.0-12]
  • Fixing bundled libffi issues
  • Readded some requirements
    [60.0-10]
  • Added fix for mozilla BZ#1436242 - IPC crashes.
    [60.0-9]
  • Bundling libffi for the sec-arches
  • Added openssl-devel for the Python
  • Fixing bundled gtk3
    [60.0-8]
  • Added fix for mozilla BZ#1458492
    [60.0-7]
  • Added patch from rhbz#1498561 to fix ppc64(le) crashes.
    [60.0-6]
  • Disabled jemalloc on second arches
    [60.0-4]
  • Update to 60.0 ESR
    [52.7.0-1]
  • Update to 52.7.0 ESR
    [52.6.0-2]
  • Build Firefox for desktop arches only (x86_64 and ppc64le)
    [52.6.0-1]
  • Update to 52.6.0 ESR
    [52.5.0-1]
  • Update to 52.5.0 ESR
    [52.4.0-1]
  • Update to 52.4.0 ESR
    [52.3.0-3]
  • Update to 52.3.0 ESR (b2)
  • Require correct nss version
    [52.2.0-1]
  • Update to 52.2.0 ESR
    [52.1.2-1]
  • Update to 52.1.2 ESR
    [52.0-7]
  • Added fix for accept language (rhbz#1454322)
    [52.0-6]
  • Removing patch required for older NSS from RHEL 7.3
  • Added patch for rhbz#1414564
    [52.0-5]
  • Added fix for mozbz#1348168/CVE-2017-5428
    [52.0-4]
  • Update to 52.0 ESR (b4)
    [52.0-3]
  • Added fix for rhbz#1423012 - ppc64 gfx crashes
    [52.0-2]
  • Enable system nss
    [52.0-1]
  • Update to 52.0ESR (B1)
  • Build RHEL7 package for Gtk3
    [52.0-0.13]
  • Added fix for rhbz#1414535
    [52.0-0.12]
  • Update to 52.0b8
    [52.0-0.11]
  • Readded addons patch
    [52.0-0.10]
  • Update to 52.0b3
    [52.0-0.9]
  • Update to 52.0b2
    [52.0-0.8]
  • Update to 52.0b1
    [52.0-0.5]
  • Firefox Aurora 52 testing build

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

Related for ELSA-2020-0521