Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 34: FEDORA-2021-ab12345xyz Critical: Firefox Privilege Escalation

fedora
Calendar Grey April 5, 2020
Dist Fedora Esm H88
The recent Chromium patch for Fedora 32 addresses urgent vulnerabilities, notably fixing stack overflow problems and memory mismanagement in WebAudio functionalities.
Update to 80.0.3987.162

Summary

Chromium is an open-source web browser, powered by WebKit (Blink).

Update to 80.0.3987.162. Fixes the following CVEs: * CVE-2020-6450 *

CVE-2020-6451 * CVE-2020-6452

* Wed Apr 1 2020 Tom Callaway - 80.0.3987.162-1

- update to 80.0.3987.162

[ 1 ] Bug #1820155 - CVE-2020-6450 chromium-browser: Use after free in WebAudio

https://bugzilla.redhat.com/show_bug.cgi?id=1820155

[ 2 ] Bug #1820156 - CVE-2020-6451 chromium-browser: Use after free in WebAudio

https://bugzilla.redhat.com/show_bug.cgi?id=1820156

[ 3 ] Bug #1820157 - CVE-2020-6452 chromium-browser: Heap buffer overflow in media

https://bugzilla.redhat.com/show_bug.cgi?id=1820157

su -c 'dnf upgrade --advisory FEDORA-2020-3f09e75bf3' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 32
Version: 80.0.3987.162
Release: 1.fc32
Summary: A WebKit (Blink) powered web browser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here