Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/1B1ADBC82099068E6E52B8C09A106C08
HistoryJan 08, 2020 - 12:00 a.m.

Security fix for the ALT Linux 10 package firefox-esr version 68.4.1-alt1

2020-01-0800:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
9

0.012 Low

EPSS

Percentile

85.5%

Jan. 8, 2020 Andrey Cherepanov 68.4.1-alt1

- New ESR version (68.4.1).
- Fixed:
  + CVE-2019-17015 Memory corruption in parent process during new content process initialization on Windows
  + CVE-2019-17016 Bypass of @namespace CSS sanitization during pasting
  + CVE-2019-17017 Type Confusion in XPCVariant.cpp
  + CVE-2019-17021 Heap address disclosure in parent process during content process initialization on Windows
  + CVE-2019-17022 CSS sanitization does not escape HTML tags
  + CVE-2019-17024 Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4