Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/BA5A75A5F45EF4972C8BA8F3D12D4F6F
HistoryMay 05, 2020 - 12:00 a.m.

Security fix for the ALT Linux 10 package firefox-esr version 68.8.0-alt1

2020-05-0500:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
6

0.015 Low

EPSS

Percentile

87.2%

May 5, 2020 Andrey Cherepanov 68.8.0-alt1

- New ESR version (68.8.0).
- Fixes:
  + CVE-2020-12387 Use-after-free during worker shutdown
  + CVE-2020-12388 Sandbox escape with improperly guarded Access Tokens
  + CVE-2020-12389 Sandbox escape with improperly separated process types
  + CVE-2020-6831 Buffer overflow in SCTP chunk input validation
  + CVE-2020-12392 Arbitrary local file access with 'Copy as cURL'
  + CVE-2020-12393 Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection
  + CVE-2020-12395 Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8