RHSA-2020:0512HighCVSS 8.8
Red Hat Security Advisory: firefox security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2020-6796 — Mozilla: Missing bounds check on shared memory read in the parent process CVE-2020-6798 — Mozilla: Incorrect parsing of template tag could result in JavaScript injection CVE-2020-6800 — Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5
🎯 Affected products14
- Red Hat Enterprise Linux AppStream (v. 8)
- firefox-0:68.5.0-2.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-0:68.5.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-0:68.5.0-2.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-0:68.5.0-2.el8_1.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-0:68.5.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-debuginfo-0:68.5.0-2.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-debuginfo-0:68.5.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-debuginfo-0:68.5.0-2.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-debuginfo-0:68.5.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-debugsource-0:68.5.0-2.el8_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-debugsource-0:68.5.0-2.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-debugsource-0:68.5.0-2.el8_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
- firefox-debugsource-0:68.5.0-2.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect.
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2020:0512
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801916
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801918
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801920
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0512.json