SCIENTIFIC-LINUX-ERRATA Archives

September 2019

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Critical: firefox security update on SL6.x i386/x86_64
From:
"Farhan A. Ahmed" <[log in to unmask]>
Reply To:
Farhan A. Ahmed
Date:
Tue, 10 Sep 2019 16:55:10 +0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (1 lines) 
    Synopsis:Critical: firefox security update

    Advisory ID:       SLSA-2019:2694-1

    Issue Date:        2019-09-10

    CVE Numbers:       CVE-2019-11733

                       CVE-2019-11740

                       CVE-2019-11742

                       CVE-2019-11743

                       CVE-2019-11744

                       CVE-2019-11746

                       CVE-2019-11752

                       CVE-2019-9812

    --

    

    This update upgrades Firefox to version 60.9.0 ESR.

    

    Security Fix(es):

    

    * Mozilla: Sandbox escape through Firefox Sync (CVE-2019-9812)

    

    * Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and

    Firefox ESR 60.9 (CVE-2019-11740)

    

    * Mozilla: Same-origin policy violation with SVG filters and canvas to

    steal cross-origin images (CVE-2019-11742)

    

    * Mozilla: XSS by breaking out of title and textarea elements using

    innerHTML (CVE-2019-11744)

    

    * Mozilla: Use-after-free while manipulating video (CVE-2019-11746)

    

    * Mozilla: Use-after-free while extracting a key value in IndexedDB

    (CVE-2019-11752)

    

    * firefox: stored passwords in 'Saved Logins' can be copied without master

    password entry (CVE-2019-11733)

    

    * Mozilla: Cross-origin access to unload event attributes (CVE-2019-11743)

    --

    

    SL6

      x86_64

        firefox-60.9.0-1.el6_10.x86_64.rpm

        firefox-debuginfo-60.9.0-1.el6_10.x86_64.rpm

        firefox-60.9.0-1.el6_10.i686.rpm

        firefox-debuginfo-60.9.0-1.el6_10.i686.rpm

      i386

        firefox-60.9.0-1.el6_10.i686.rpm

        firefox-debuginfo-60.9.0-1.el6_10.i686.rpm

    

    - Scientific Linux Development Team

ATOM RSS1 RSS2