[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2020:2827 -- centos 7 firefox

ID: oval:org.secpod.oval:def:205590Date: (C)2020-07-10   (M)2023-12-20
Class: PATCHFamily: unix




Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 68.10.0 ESR. Security Fix: * Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64 * Mozilla: Information disclosure due to manipulated URL object * Mozilla: Use-after-free in nsGlobalWindowInner * Mozilla: Use-After-Free when trying to connect to a STUN server * Mozilla: Add-On updates did not respect the same certificate trust rules as software updates For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Platform:
CentOS 7
Product:
firefox
Reference:
CESA-2020:2827
CVE-2020-12417
CVE-2020-12418
CVE-2020-12419
CVE-2020-12420
CVE-2020-12421
CVE    5
CVE-2020-12420
CVE-2020-12421
CVE-2020-12417
CVE-2020-12419
...

© SecPod Technologies