Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200506)

Security Fixes : - Mozilla: Use-after-free during worker shutdown CVE-2020-12387 - Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 CVE-2020-12395 - Mozilla: Buffer overflow in SCTP chunk input validation CVE-2020-6831 - Mozilla: Arbitrary local file access with 'Copy as cURL'...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 8 : firefox (RHSA-2020:2032)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2032 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

RHEL 8 : firefox (RHSA-2020:2031)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2031 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

RHEL 7 : firefox (RHSA-2020:2037)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2037 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Security Vulnerabilities fixed in Thunderbird 68.8.0 — Mozilla

By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. A...

Security fix for the ALT Linux 10 package thunderbird version 68.8.0-alt1

May 5, 2020 Andrey Cherepanov 68.8.0-alt1 - New version 68.8.0. - Fixes: + CVE-2020-12397 Sender Email Address Spoofing using encoded Unicode characters + CVE-2020-12387 Use-after-free during worker shutdown + CVE-2020-6831 Buffer overflow in SCTP chunk input validation + CVE-2020-12392 Arbitrary...

Security Vulnerabilities fixed in Firefox 76 — Mozilla

A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape.Note: this issue only affects Firef...

Security fix for the ALT Linux 10 package firefox-esr version 68.8.0-alt1

May 5, 2020 Andrey Cherepanov 68.8.0-alt1 - New ESR version 68.8.0. - Fixes: + CVE-2020-12387 Use-after-free during worker shutdown + CVE-2020-12388 Sandbox escape with improperly guarded Access Tokens + CVE-2020-12389 Sandbox escape with improperly separated process types + CVE-2020-6831 Buffer...

firefox security update

CentOS Errata and Security Advisory CESA-2020:1429 An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

thunderbird security update

CentOS Errata and Security Advisory CESA-2020:1488 An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS 6 : firefox (RHSA-2020:1429)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1429 advisory. - When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned...

CentOS 6 : thunderbird (RHSA-2020:1488)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1488 advisory. - Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after- free. We are aware of targeted attacks in t...

CVE-2020-6825

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary...

Memory corruption

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary...

CVE-2020-6825

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary...

Amazon Linux 2 : thunderbird (ALAS-2020-1414)

The version of thunderbird installed on the remote host is prior to 68.6.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1414 advisory. The Mozilla Foundation Security Advisory describes this flaw as: When removing data about an origin whose tab was...

Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud App Management

Summary There are multiple vulnerabilities in Mozilla Firefox used by IBM® Cloud App Management. IBM Cloud App Management has addressed the applicable CVEs in a later version. Vulnerability Details CVEID: CVE-2020-6796 DESCRIPTION: Mozilla Firefox could allow a remote attacker to execute arbitrar...

SUSE-SU-2020:1027-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor boo1168630 - CVE-2020-6820: Use-after-free when handling a ReadableStream boo1168630 - CVE-2020-6821: Uninitialized memory could be read when...