Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

Slackware: 2020-009-01 Critical: Mozilla-Firefox Type Confusion

slackware
Calendar Grey January 9, 2020
Dist Slackware Esm H88
Recent updates to the Mozilla Firefox packages for Slackware 14.2 address a major security vulnerability. Users are advised to update promptly.
New mozilla-firefox packages are available for Slackware 14.2 and -current to fix a security issue

Summary

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.4.1esr-i686-1_slack14.2.txz: Upgraded. This release fixes a critial security issue: Mozilla Foundation Security Advisory 2020-03: Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. For more information, see: https://www.mozilla.org/en-US/security/advisories/mfsa2020-03/ https://www.firefox.com/en-US/firefox/68.4.1/releasenotes/?redirect_source=mozilla-org https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/

Topics%20covered

Topics Covered

security advisory security issue critical package update slackware mozilla-firefox type confusion

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.2 package: 42bc8620e8198534049346b7f32d82bb mozilla-firefox-68.4.1esr-i686-1_slack14.2.txz
Slackware x86_64 14.2 package: 5ea87b7096989b8d7e504c94433d70c9 mozilla-firefox-68.4.1esr-x86_64-1_slack14.2.txz
Slackware -current package: 085d4e56e0bfaec30dacf432af505dda xap/mozilla-firefox-68.4.1esr-i686-1.txz
Slackware x86_64 -current package: 283e5f4f41cfbd43ec6e849700802708 xap/mozilla-firefox-68.4.1esr-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory security issue critical package update slackware mozilla-firefox type confusion

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg mozilla-firefox-68.4.1esr-i686-1_slack14.2.txz

Related News

Your message here