Mageia 2020-0274: firefox security update

    Date 04 Jul 2020
    396
    Posted By LinuxSecurity Advisories
    Updated nss and firefox packages fix security vulnerabilities: NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys (CVE-2020-12399).
    MGASA-2020-0274 - Updated firefox packages fix security vulnerability
    
    Publication date: 04 Jul 2020
    URL: https://advisories.mageia.org/MGASA-2020-0274.html
    Type: security
    Affected Mageia releases: 7
    CVE: CVE-2020-12417,
         CVE-2020-12418,
         CVE-2020-12419,
         CVE-2020-12420,
         CVE-2020-12421
    
    Updated nss and firefox packages fix security vulnerabilities:
    
    NSS has shown timing differences when performing DSA signatures, which
    was exploitable and could eventually leak private keys (CVE-2020-12399).
    
    Side channel vulnerabilities during RSA key generation in NSS
    (CVE-2020-12402).
    
    When browsing a malicious page, a race condition in our 
    SharedWorkerService could occur and lead to a potentially exploitable
    crash due to a use-after-free (CVE-2020-12405).
    
    Mozilla developer Iain Ireland discovered a missing type check during
    unboxed objects removal, resulting in a crash due to type confusion with
    NativeTypes. We presume that with enough effort that it could be exploited
    to run arbitrary code (CVE-2020-12406).
    
    Mozilla developers Tom Tung and Karl Tomlinson reported memory safety bugs
    present in Firefox ESR 68.8. Some of these bugs showed evidence of memory
    corruption and we presume that with enough effort some of these could have
    been exploited to run arbitrary code (CVE-2020-12410).
    
    Manipulating individual parts of a URL object could have caused an
    out-of-bounds read, leaking process memory to malicious JavaScript
    (CVE-2020-12418).
    
    When processing callbacks that occurred during window flushing in the parent
    process, the associated window may die; causing a use-after-free in
    nsGlobalWindowInner. This could have led to memory corruption and a
    potentially exploitable crash (CVE-2020-12419).
    
    When trying to connect to a STUN server, a race condition could have caused a
    use-after-free of a pointer, leading to memory corruption and a potentially
    exploitable crash (CVE-2020-12420).
    
    When performing add-on updates, certificate chains terminating in
    non-built-in-roots were rejected (even if they were legitimately added by an
    administrator.) This could have caused add-ons to become out-of-date silently
    without notification to the user (CVE-2020-12421).
    
    References:
    - https://bugs.mageia.org/show_bug.cgi?id=26890
    - https://groups.google.com/forum/#!topic/mozilla.dev.tech.nspr/YDlWqMPNR9Y
    - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.52.1_release_notes
    - https://www.mozilla.org/en-US/security/advisories/mfsa2020-21/
    - https://www.mozilla.org/en-US/security/advisories/mfsa2020-25/
    - https://www.debian.org/lts/security/2020/dla-2266
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12417
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12418
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12419
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12420
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12421
    
    SRPMS:
    - 7/core/nspr-4.26-1.mga7
    - 7/core/rootcerts-20200612.00-1.mga7
    - 7/core/nss-3.52.1-1.1.mga7
    - 7/core/firefox-68.10.0-1.mga7
    - 7/core/firefox-l10n-68.10.0-1.mga7
    

    LinuxSecurity Poll

    Are you planning to use the 1Password password manager now that it is available to Linux users?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/35-are-you-planning-to-use-the-1password-password-manager-now-that-it-is-available-to-linux-users?task=poll.vote&format=json
    35
    radio
    [{"id":"122","title":"Yes","votes":"1","type":"x","order":"1","pct":25,"resources":[]},{"id":"123","title":"No ","votes":"2","type":"x","order":"2","pct":50,"resources":[]},{"id":"124","title":"Not sure at the moment","votes":"1","type":"x","order":"3","pct":25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
    bottom 200

    Advisories

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.