Synopsis:          Critical: firefox security update
Advisory ID:       SLSA-2020:1339-1
Issue Date:        2020-04-07
CVE Numbers:       None
--

Security Fix(es):

* Mozilla: Use-after-free while running the nsDocShell destructor
(CVE-2020-6819)

* Mozilla: Use-after-free when handling a ReadableStream (CVE-2020-6820)
--

SL6
  x86_64
    firefox-68.6.1-1.el6_10.x86_64.rpm
    firefox-debuginfo-68.6.1-1.el6_10.x86_64.rpm
    firefox-68.6.1-1.el6_10.i686.rpm
    firefox-debuginfo-68.6.1-1.el6_10.i686.rpm
  i386
    firefox-68.6.1-1.el6_10.i686.rpm
    firefox-debuginfo-68.6.1-1.el6_10.i686.rpm

- Scientific Linux Development Team

SciLinux: SLSA-2020-1339-1 Critical: firefox on SL6.x i386/x86_64

Mozilla: Use-after-free while running the nsDocShell destructor (CVE-2020-6819) * Mozilla: Use-after-free when handling a ReadableStream (CVE-2020-6820) SL6 x86_64 firefox-68.6.1-1...

Summary

Critical: firefox security update



Security Fixes

* Mozilla: Use-after-free while running the nsDocShell destructor (CVE-2020-6819)
* Mozilla: Use-after-free when handling a ReadableStream (CVE-2020-6820)
SL6 x86_64 firefox-68.6.1-1.el6_10.x86_64.rpm firefox-debuginfo-68.6.1-1.el6_10.x86_64.rpm firefox-68.6.1-1.el6_10.i686.rpm firefox-debuginfo-68.6.1-1.el6_10.i686.rpm i386 firefox-68.6.1-1.el6_10.i686.rpm firefox-debuginfo-68.6.1-1.el6_10.i686.rpm
- Scientific Linux Development Team

Severity
Advisory ID: SLSA-2020:1339-1
Issued Date: : 2020-04-07
CVE Numbers: None

Related News