Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Mageia: 2019-0268 Moderate: Firefox Security Issues Addressed

mageia
Calendar Grey September 12, 2019
Dist Mageia Esm H88
Recent Chrome updates address critical vulnerabilities such as remote code execution, cross-site scripting, and encryption flaws.
The updated packages fix several bugs and some security issues: Sandbox escape through Firefox Sync

Summary

The updated packages fix several bugs and some security issues:
Sandbox escape through Firefox Sync. (CVE-2019-9812)
Stored passwords in 'Saved Logins' can be copied without master password entry. (CVE-2019-11733)
Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1. (CVE-2019-11735)
File manipulation and privilege escalation in Mozilla Maintenance Service. (CVE-2019-11736)
Content security policy bypass through hash-based sources in directives. (CVE-2019-11738)
Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9. (CVE-2019-11740)
Same-origin policy violation with SVG filters and canvas to steal cross-origin images. (CVE-2019-11742)
Cross-origin access to unload event attributes. (CVE-2019-11743)
XSS by breaking out of title and textarea elements using innerHTML. (CVE-2019-11744)
Use-after-free while manipulating video. (CVE-2019-11746)
'Forget about this site' removes sites from pre-loaded HSTS list. (CVE-2019-11747)
Persistence of WebRTC permissio...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=25359

- https://www.firefox.com/en-US/firefox/68.0.1/releasenotes/?redirect_source=mozilla-org

- https://www.firefox.com/en-US/firefox/68.0.2/releasenotes/?redirect_source=mozilla-org

- https://www.firefox.com/en-US/firefox/68.1.0/releasenotes/?redirect_source=mozilla-org

- https://www.mozilla.org/en-US/security/advisories/mfsa2019-24/

- https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/

- https://hg-edge.mozilla.org/projects/nss/log/default/lib/ckfw/builtins/certdata.txt

- - https://groups.google.com/forum/#!topic/mozilla.dev.tech.nspr/RQtSKOF9rM0

- https://access.redhat.com/errata/RHSA-2019:2663

- https://www.cve.org/CVERecord?id=CVE-2019-9812

- https://www.cve.org/CVERecord?id=CVE-2019-11733

- https://www.cve.org/CVERecord?id=CVE-2019-11735

- https://www.cve.org/CVERecord?id=CVE-2019-11736

- https://www.cve.org/CVERecord?id=CVE-2019-11738

- https://www.cve.org/CVERecord?id=CVE-2019-11740

- https://www.cve.org/CVERecord?id=CVE-2019-11742

- https://www.cve.org/CVERecord?id=CVE-2019-11743

- https://www.cve.org/CVERecord?id=CVE-2019-11744

- https://www.cve.org/CVERecord?id=CVE-2019-11746

- https://www.cve.org/CVERecord?id=CVE-2019-11747

- https://www.cve.org/CVERecord?id=CVE-2019-11748

- https://www.cve.org/CVERecord?id=CVE-2019-11749

- https://www.cve.org/CVERecord?id=CVE-2019-11750

- https://www.cve.org/CVERecord?id=CVE-2019-11751

- https://www.cve.org/CVERecord?id=CVE-2019-11752

- https://www.cve.org/CVERecord?id=CVE-2019-11753

Topics%20covered

Topics Covered

security advisory privilege escalation firefox memory safety password security sandbox escape Mageia

Resolution

SRPMS

- 7/core/firefox-68.1.0-1.mga7

- 7/core/firefox-l10n-68.1.0-1.mga7

- 7/core/rootcerts-20190820.00-1.mga7

- 7/core/nspr-4.22-1.mga7

- 7/core/nss-3.46.0-1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 12 Sep 2019
URL: https://advisories.mageia.org/MGASA-2019-0268.html
Type: security
CVE: CVE-2019-9812, CVE-2019-11733, CVE-2019-11735, CVE-2019-11736, CVE-2019-11738, CVE-2019-11740, CVE-2019-11742, CVE-2019-11743, CVE-2019-11744, CVE-2019-11746, CVE-2019-11747, CVE-2019-11748, CVE-2019-11749, CVE-2019-11750, CVE-2019-11751, CVE-2019-11752, CVE-2019-11753

Topics%20covered

Topics Covered

security advisory privilege escalation firefox memory safety password security sandbox escape Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here