[SECURITY] [DLA 2140-1] firefox-esr security update

Package : firefox-esr Version : 68.6.0esr-1deb8u1 CVE ID : CVE-2019-20503 CVE-2020-6805 CVE-2020-6806 CVE-2020-6807 CVE-2020-6811 CVE-2020-6812 CVE-2020-6814 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary...

Mozilla Firefox ESR < 68.6

The version of Firefox ESR installed on the remote Windows host is prior to 68.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-09 advisory. - Mozilla developers and community members Byron Campen, Jason Kratzer, and Christian Holler reported memory safety...

Firefox Bug Opens iPhone AirPods to Third-Party Snooping

Five high-severity bugs were fixed in the Firefox web browser with the release of version 74 by the Mozilla Foundation on Tuesday. In addition, Mozilla reported a quirky moderate-severity flaw that allows hackers to target iPhone users and collect data tied to connected AirPods, if in use. In...

Firefox Bug Opens iPhone AirPods to Third-Party Snooping

Five high-severity bugs were fixed in the Firefox web browser with the release of version 74 by the Mozilla Foundation on Tuesday. In addition, Mozilla reported a quirky moderate-severity flaw that allows hackers to target iPhone users and collect data tied to connected AirPods, if in use. In...

[SECURITY] Fedora 32 Update: firefox-74.0-1.nss.fc32

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

CVE-2020-4082

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...

Cross site scripting

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...

CVE-2020-4082

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...

Google Chrome < 80.0.3987.132 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.132. It is, therefore, affected by a vulnerability as referenced in the 202003stable-channel-update-for-desktop advisory. - Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132...

CVE-2020-6800

Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. In general, these flaws...

CVE-2020-9545

Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site...

[SECURITY] Fedora 30 Update: firefox-73.0.1-1.fc30

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Google Chrome < 80.0.3987.122 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.122. It is, therefore, affected by multiple vulnerabilities as referenced in the 202002stable-channel-update-for-desktop24 advisory. - Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a...

[SECURITY] Fedora 31 Update: firefox-73.0.1-1.fc31

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Google Chrome < 80.0.3987.116 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.116. It is, therefore, affected by multiple vulnerabilities as referenced in the 202002stable-channel-update-for-desktop18 advisory. - Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a...

CentOS 7 : firefox (RHSA-2020:0520)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0520 advisory. - A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This coul...

Ubuntu 18.04 LTS : WebKitGTK+ vulnerabilities (USN-4281-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4281-1 advisory. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, ...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

[SECURITY] Fedora 30 Update: firefox-73.0-2.fc30

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Cross site scripting

An internal product security audit of Lenovo XClarity Administrator LXCA discovered a Document Object Model DOM based cross-site scripting vulnerability in versions prior to 2.6.6 that could allow JavaScript code to be executed in the user's web browser if a specially crafted link is visited. The...