Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 7 articles for you...
202
security advisorymemory safetyimportant updateopenSUSE 15.6: 2025:1138-1 important: MozillaFirefox patch
An update that solves three vulnerabilities can now be installed.. # Security update for MozillaFirefox Announcement ID: SUSE-SU-2025:1138-1 Release Date: 2025-04-03T15:14:14Z Rating: important References: * bsc#1240083 Cross-References: * CVE-2025-3028 * CVE-2025-3029 * CVE-2025-3030 CVSS scores: * CVE-2025-3028 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-3028 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-3029 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-3029 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-3030 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-3030 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: * Firefox Extended Support Release 128.9.0 ESR MFSA 2025-22 (bsc#1240083): * CVE-2025-3028: Use-after-free triggered by XSLTProcessor * CVE-2025-3029: URL Bar Spoofing via non-BMP Unicode characters * CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1138=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-1138=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1138=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1138=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1138=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1138=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1138=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1138=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1138=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1138=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1138=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1138=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1138=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-1138=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * MozillaFirefox-branding-upstream-128.9.0-150200.152.176.1 * openSUSE Leap 15.6 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * Desktop Applications Module 15-SP6 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 *MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 *MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 *MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * MozillaFirefox-128.9.0-150200.152.176.1 * MozillaFirefox-debugsource-128.9.0-150200.152.176.1 * MozillaFirefox-translations-common-128.9.0-150200.152.176.1 * MozillaFirefox-debuginfo-128.9.0-150200.152.176.1 * MozillaFirefox-translations-other-128.9.0-150200.152.176.1 * SUSE Enterprise Storage 7.1 (noarch) * MozillaFirefox-devel-128.9.0-150200.152.176.1 ## References: * https://www.suse.com/security/cve/CVE-2025-3028.html * https://www.suse.com/security/cve/CVE-2025-3029.html * https://www.suse.com/security/cve/CVE-2025-3030.html * https://bugzilla.suse.com/show_bug.cgi?id=1240083 . Crucial Mozilla Firefox upgrade addresses memory security and impersonation flaws in openSUSE platforms.. MozillaFirefox Update, openSUSE Security, Browser Security Patches, Memory Safety Updates. . Severity: Important. LinuxSecurity.com Team
Apr 03, 2025
•Important
OpenSUSE
202
security advisorysecurity issuesoftware updateopenSUSE Tumbleweed: 2025:14619-1 moderate: firefox-esr security issues
An update that solves 7 vulnerabilities can now be installed.. # firefox-esr-128.6.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14619-1 Rating: moderate Cross-References: * CVE-2025-0237 * CVE-2025-0238 * CVE-2025-0239 * CVE-2025-0240 * CVE-2025-0241 * CVE-2025-0242 * CVE-2025-0243 Affected Products: * openSUSE Tumbleweed An update that solves 7 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the firefox-esr-128.6.0-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * firefox-esr 128.6.0-1.1 * firefox-esr-branding-upstream 128.6.0-1.1 * firefox-esr-translations-common 128.6.0-1.1 * firefox-esr-translations-other 128.6.0-1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-0237.html * https://www.suse.com/security/cve/CVE-2025-0238.html * https://www.suse.com/security/cve/CVE-2025-0239.html * https://www.suse.com/security/cve/CVE-2025-0240.html * https://www.suse.com/security/cve/CVE-2025-0241.html * https://www.suse.com/security/cve/CVE-2025-0242.html * https://www.suse.com/security/cve/CVE-2025-0243.html . This Debian advisory highlights security patches for chromium-browser-104.0.5112.79-1, addressing multiple moderate risk vulnerabilities.. openSUSE Tumbleweed, firefox-esr update, security patch, moderate advisory. . LinuxSecurity.com Team
Jan 08, 2025
OpenSUSE
89
security advisoryFedoracritical updateFedora 37: FEDORA-2023-7f87c8b975 Critical: chromium Use After Free
update to 118.0.5993.117. Security release for CVE-2023-5472. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-7f87c8b975 2023-11-03 01:09:39.384873 -------------------------------------------------------------------------------- Name : chromium Product : Fedora 37 Version : 118.0.5993.117 Release : 1.fc37 URL : https://www.chromium.org/Home/ Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: update to 118.0.5993.117. Security release for CVE-2023-5472 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 25 2023 Than Ngo - 118.0.5993.117-1 - update to 118.0.5993.117 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2246173 - CVE-2023-5472 chromium: chromium-browser: Use after free in Profiles [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2246173 [ 2 ] Bug #2246174 - CVE-2023-5472 chromium: chromium-browser: Use after free in Profiles [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2246174 [ 3 ] Bug #2246427 - Using this package, the only way to stay relatively current with security patches is to use the rawhide build. All other builds, including from testing, are consistently behind. https://bugzilla.redhat.com/show_bug.cgi?id=2246427 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-7f87c8b975' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with theFedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Nov 03, 2023
•Critical
Fedora
98
security advisorysecurity updateRed Hat Enterprise LinuxRed Hat 9.0: RHSA-2023-4073-01 Important: Firefox Security Threat
An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: firefox security update Advisory ID: RHSA-2023:4073-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:4073 Issue date: 2023-07-13 CVE Names: CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211 ==================================================================== 1. Summary: An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v.9.0) - aarch64, ppc64le, s390x, x86_64 3. Description: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.13.0 ESR. Security Fix(es): * Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202) * Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211) * Mozilla: Fullscreen notification obscured (CVE-2023-37207) * Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208) For more details about the security issue(s), including the impact, a CVSS score,acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2219747 - CVE-2023-37201 Mozilla: Use-after-free in WebRTC certificate generation 2219748 - CVE-2023-37202 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey 2219749 - CVE-2023-37207 Mozilla: Fullscreen notification obscured 2219750 - CVE-2023-37208 Mozilla: Lack of warning when opening Diagcab files 2219751 - CVE-2023-37211 Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 6. Package List: Red Hat Enterprise Linux AppStream EUS (v.9.0): Source: firefox-102.13.0-2.el9_0.src.rpm aarch64: firefox-102.13.0-2.el9_0.aarch64.rpm firefox-debuginfo-102.13.0-2.el9_0.aarch64.rpm firefox-debugsource-102.13.0-2.el9_0.aarch64.rpm ppc64le: firefox-102.13.0-2.el9_0.ppc64le.rpm firefox-debuginfo-102.13.0-2.el9_0.ppc64le.rpm firefox-debugsource-102.13.0-2.el9_0.ppc64le.rpm s390x: firefox-102.13.0-2.el9_0.s390x.rpm firefox-debuginfo-102.13.0-2.el9_0.s390x.rpm firefox-debugsource-102.13.0-2.el9_0.s390x.rpm x86_64: firefox-102.13.0-2.el9_0.x86_64.rpm firefox-debuginfo-102.13.0-2.el9_0.x86_64.rpm firefox-debugsource-102.13.0-2.el9_0.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2023-37201 https://access.redhat.com/security/cve/CVE-2023-37202 https://access.redhat.com/security/cve/CVE-2023-37207 https://access.redhat.com/security/cve/CVE-2023-37208 https://access.redhat.com/security/cve/CVE-2023-37211 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJkr/57AAoJENzjgjWX9erEKzsP/A3Oyss/haVYug3KOieW1wt/ D1uN5+GtR/rElViqWFYEqhhg9sy6a6IP+U5ob9mKbxCy6T0HJ3ekgsBhEA2Y1IwS b+V7jlDRAuAtCeXmikhmR7yXn98yoe9W6bnia4ZxibyJ3mw/l+/drbQ8JmDpALj8 AHe4N7sd7+1dfozEe0q//VVhRElFlADUEkctUtwSJByPXPX4fEf8Jbbbf5XQv8Wz wdV3o1kkBZvLFakmqFJF6iGxg/f+PAvzGBoQ5AKYTxrpPV3FasLyEKagqeJdviik rF+hsA2591BQvn9ELbzBX+4XzGDcJlL9CkCNlTujy6sDFY4H2bmroMtlJTDQW7EI 7ucFLTZeoAHLdscM64yGMpYPBrd0W92QgmJKOd4xfglxgbTHWQDss67pxcoZ0kep yAKuiYyvLCrFgujb2BJaqMd8noNhzXdsy2xLATheLc0sa07yNhdhTjhp9lYptN5e BICtjLHm2ufUS6sEyGDEBGkEUQ/02nTZWBqTt0kHwHGYwpV0QoGnrvHva8NTlgEJ Fx2pL/PvO52YCjgALa8PyBKQ5vRqqNchhXpXO2SOqK/EnxMNNxpTke8CPHlzlFsJ dlL68qjEERCdPP4Cmun6MaUi5msrQq0gqS0UOd9Ir+Yds+fwa9rbm0I+FGOu1CXE Esd1rUYv03qoJyW/gGVJ =kGnH -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jul 13, 2023
•Important
Red Hat
99
security advisorysoftware updatesecurity fixSlackware 15.0: 2022-291-02 moderate: Mozilla-Firefox security patch
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] mozilla-firefox (SSA:2022-291-02) New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/mozilla-firefox-102.4.0esr-i686-1_slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see: https://www.firefox.com/en-US/firefox/102.4.0/releasenotes/?redirect_source=mozilla-org https://www.mozilla.org/en-US/security/advisories/mfsa2022-45/ https://www.cve.org/CVERecord?id=CVE-2022-42927 https://www.cve.org/CVERecord?id=CVE-2022-42928 https://www.cve.org/CVERecord?id=CVE-2022-42929 https://www.cve.org/CVERecord?id=CVE-2022-42932 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 15.0: Updated package for Slackware x86_64 15.0: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 15.0 package: 9a9783399c43cd136ca89815892272ea mozilla-firefox-102.4.0esr-i686-1_slack15.0.txz Slackware x86_64 15.0 package: ca7d3d923ed0b5df4c4b572e5d342d46 mozilla-firefox-102.4.0esr-x86_64-1_slack15.0.txz Slackware -current package: 795569fbcaca42d75a0e9d4168a49450 xap/mozilla-firefox-106.0-i686-1.txz Slackware x86_64 -current package: b9bedf24494172f11e5c1de8b549daba xap/mozilla-firefox-106.0-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkgmozilla-firefox-102.4.0esr-i686-1_slack15.0.txz +-----+ . Recent updates to Mozilla Firefox for Slackware 15.0 and -current address critical security vulnerabilities and enhance performance.. Mozilla Firefox, Software Update, Slackware Security Fix. . Severity: Important. LinuxSecurity.com Team
Oct 18, 2022
•Important
Slackware
219
security advisorysecurity issueimportant fixRocky Linux 8 RLSA-2021:2233 Important: Firefox 78.11.0 Update
Important: firefox security update. \{'type': 'Security', 'shortCode': 'RL', 'name': 'RLSA-2021:2233', 'synopsis': 'Important: firefox security update', 'severity': 'Important', 'topic': 'An update for firefox is now available for Rocky Linux 8.\nRocky Linux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n[Updated 8 June 2021]Previously, this erratum was marked as having a security impact of Critical. This was incorrect; the security impact of this erratum has been changed to Important, to correctly reflect the highest impact rating of CVE fixes included in this release. No changes have been made to packages.', 'description': 'Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\nThis update upgrades Firefox to version 78.11.0 ESR.\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.', 'solution': None, 'affectedProducts': ['Rocky Linux 8'], 'fixes': ['1966831'], 'cves': ['Red Hat:::https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-29967.json:::CVE-2021-29967'], 'references': [], 'publishedAt': '2021-07-22T03:19:47.617043Z', 'rpms': ['firefox-78.11.0-3.el8_4.aarch64.rpm', 'firefox-78.11.0-3.el8_4.src.rpm', 'firefox-78.11.0-3.el8_4.x86_64.rpm', 'firefox-debuginfo-78.11.0-3.el8_4.aarch64.rpm', 'firefox-debuginfo-78.11.0-3.el8_4.x86_64.rpm', 'firefox-debugsource-78.11.0-3.el8_4.aarch64.rpm', 'firefox-debugsource-78.11.0-3.el8_4.x86_64.rpm', 'thunderbird-78.11.0-1.el8_4.aarch64.rpm', 'thunderbird-78.11.0-1.el8_4.src.rpm', 'thunderbird-78.11.0-1.el8_4.x86_64.rpm', 'thunderbird-debuginfo-78.11.0-1.el8_4.aarch64.rpm', 'thunderbird-debuginfo-78.11.0-1.el8_4.x86_64.rpm','thunderbird-debugsource-78.11.0-1.el8_4.aarch64.rpm', 'thunderbird-debugsource-78.11.0-1.el8_4.x86_64.rpm']}\. Thunderbird 91.0.2 release for Fedora 35 enhances privacy measures. Ensure your communications are secure with the newest adjustments.. firefox security update, rocky linux 8, important security update, firefox version 78.11.0, security issue fix. . Severity: Important. LinuxSecurity.com Team
Sep 02, 2022
•Important
Rocky Linux
100
security advisorysecurity updatelocal accessSUSE: 2022:0821-1 Important: MozillaFirefox Critical Web Threats
An update that fixes 5 vulnerabilities is now available. . SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0821-1 Rating: important References: #1196900 Cross-References: CVE-2022-26381 CVE-2022-26383 CVE-2022-26384 CVE-2022-26386 CVE-2022-26387 Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.7.0 ESR (bsc#1196900): - CVE-2022-26383: Browser window spoof using fullscreen mode - CVE-2022-26384: iframe allow-scripts sandbox bypass - CVE-2022-26387: Time-of-check time-of-use bug when verifying add-on signatures - CVE-2022-26381: Use-after-free in text reflows - CVE-2022-26386: Temporary files downloaded to /tmp and accessible by other local users Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-821=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-821=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-821=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-821=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-821=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-821=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-821=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-821=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-821=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-821=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-821=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-821=1 Package List: - SUSE Manager Server 4.1 (ppc64le s390x x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Manager Proxy 4.1 (x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le x86_64): MozillaFirefox-devel-91.7.0-152.22.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le x86_64): MozillaFirefox-devel-91.7.0-152.22.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): MozillaFirefox-91.7.0-152.22.1 MozillaFirefox-debuginfo-91.7.0-152.22.1 MozillaFirefox-debugsource-91.7.0-152.22.1 MozillaFirefox-devel-91.7.0-152.22.1 MozillaFirefox-translations-common-91.7.0-152.22.1 MozillaFirefox-translations-other-91.7.0-152.22.1 References: https://www.suse.com/security/cve/CVE-2022-26381.html https://www.suse.com/security/cve/CVE-2022-26383.html https://www.suse.com/security/cve/CVE-2022-26384.html https://www.suse.com/security/cve/CVE-2022-26386.html https://www.suse.com/security/cve/CVE-2022-26387.html https://bugzilla.suse.com/1196900 . A significant safety patch has been released for Chromium, resolving several urgent vulnerabilities in Ubuntu platforms.. MozillaFirefox Security,SUSE Update,System Patching,Browser Issues. . Severity: Important. LinuxSecurity.com Team
Mar 14, 2022
•Important
SuSE
89
security advisorysecurity updatefedoraFedora 30: FEDORA-2019-05a780936d Critical: Chromium Buffer Overflow
Update to 73.0.3683.75. Fixes large bucket of CVEs. CVE-2019-5754 CVE-2019-5782 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-5763 CVE-2019-5764 CVE-2019-5765 CVE-2019-5766 CVE-2019-5767 CVE-2019-5768 CVE-2019-5769 CVE-2019-5770 CVE-2019-5771 CVE-2019-5772 CVE-2019-5773 CVE-2019-5774. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-05a780936d 2019-03-29 19:07:28.736590 --------------------------------------------------------------------------------Name : chromium Product : Fedora 30 Version : 73.0.3683.75 Release : 2.fc30 URL : https://www.chromium.org/Home/ Summary : A WebKit (Blink) powered web browser Description : Chromium is an open-source web browser, powered by WebKit (Blink). --------------------------------------------------------------------------------Update Information: Update to 73.0.3683.75. Fixes large bucket of CVEs. CVE-2019-5754 CVE-2019-5782 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-5763 CVE-2019-5764 CVE-2019-5765 CVE-2019-5766 CVE-2019-5767 CVE-2019-5768 CVE-2019-5769 CVE-2019-5770 CVE-2019-5771 CVE-2019-5772 CVE-2019-5773 CVE-2019-5774 CVE-2019-5775 CVE-2019-5776 CVE-2019-5777 CVE-2019-5778 CVE-2019-5779 CVE-2019-5780 CVE-2019-5781 CVE-2019-5784 CVE-2019-5786 CVE-2019-5787 CVE-2019-5788 CVE-2019-5789 CVE-2019-5790 CVE-2019-5791 CVE-2019-5792 CVE-2019-5793 CVE-2019-5794 CVE-2019-5795 CVE-2019-5796 CVE-2019-5797 CVE-2019-5798 CVE-2019-5799 CVE-2019-5800 CVE-2019-5802 CVE-2019-5803 --------------------------------------------------------------------------------References: [ 1 ] Bug #1688206 - CVE-2019-5804 chromium-browser: Command line command injection on Windows https://bugzilla.redhat.com/show_bug.cgi?id=1688206 [ 2 ] Bug #1688205 - CVE-2019-5803 chromium-browser: CSP bypass with JavascriptURLs' https://bugzilla.redhat.com/show_bug.cgi?id=1688205 [ 3 ] Bug #1688204 - CVE-2019-5802 chromium-browser: Security UI spoofing https://bugzilla.redhat.com/show_bug.cgi?id=1688204 [ 4 ] Bug #1688203 - CVE-2019-5801 chromium-browser: Incorrect Omnibox display on iOS https://bugzilla.redhat.com/show_bug.cgi?id=1688203 [ 5 ] Bug #1688202 - CVE-2019-5800 chromium-browser: CSP bypass with blob URL https://bugzilla.redhat.com/show_bug.cgi?id=1688202 [ 6 ] Bug #1688201 - CVE-2019-5799 chromium-browser: CSP bypass with blob URL https://bugzilla.redhat.com/show_bug.cgi?id=1688201 [ 7 ] Bug #1688200 - CVE-2019-5798 chromium-browser: Out of bounds read in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1688200 [ 8 ] Bug #1688199 - CVE-2019-5797 chromium-browser: Race condition in DOMStorage https://bugzilla.redhat.com/show_bug.cgi?id=1688199 [ 9 ] Bug #1688198 - CVE-2019-5796 chromium-browser: Race condition in Extensions https://bugzilla.redhat.com/show_bug.cgi?id=1688198 [ 10 ] Bug #1688197 - CVE-2019-5795 chromium-browser: Integer overflow in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1688197 [ 11 ] Bug #1688196 - CVE-2019-5794 chromium-browser: Security UI spoofing https://bugzilla.redhat.com/show_bug.cgi?id=1688196 [ 12 ] Bug #1688195 - CVE-2019-5793 chromium-browser: Excessive permissions for private API in Extensions https://bugzilla.redhat.com/show_bug.cgi?id=1688195 [ 13 ] Bug #1688194 - CVE-2019-5792 chromium-browser: Integer overflow in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1688194 [ 14 ] Bug #1688193 - CVE-2019-5791 chromium-browser: Type confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1688193 [ 15 ] Bug #1688192 - CVE-2019-5790 chromium-browser: Heap buffer overflow in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1688192 [ 16 ] Bug #1688191 - CVE-2019-5789 chromium-browser: Use after free in WebMIDI https://bugzilla.redhat.com/show_bug.cgi?id=1688191 [ 17 ] Bug #1688190 - CVE-2019-5788 chromium-browser: Use after free in FileAPI https://bugzilla.redhat.com/show_bug.cgi?id=1688190 [ 18 ] Bug #1688189 - CVE-2019-5787 chromium-browser: Use after free in Canvas https://bugzilla.redhat.com/show_bug.cgi?id=1688189 [ 19 ] Bug #1685162 - CVE-2019-5786 chromium-browser: Use-after-free in FileReader https://bugzilla.redhat.com/show_bug.cgi?id=1685162 [ 20 ] Bug #1676527 - CVE-2019-5784 chromium-browser: Inappropriate implementation in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1676527 [ 21 ] Bug #1670764 - CVE-2019-5780 chromium-browser: Insufficient policy enforcement https://bugzilla.redhat.com/show_bug.cgi?id=1670764 [ 22 ] Bug #1670763 - CVE-2019-5779 chromium-browser: Insufficient policy enforcement in ServiceWorker https://bugzilla.redhat.com/show_bug.cgi?id=1670763 [ 23 ] Bug #1670762 - CVE-2019-5778 chromium-browser: Insufficient policy enforcement in Extensions https://bugzilla.redhat.com/show_bug.cgi?id=1670762 [ 24 ] Bug #1670761 - CVE-2019-5777 chromium-browser: Insufficient policy enforcement in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1670761 [ 25 ] Bug #1670760 - CVE-2019-5776 chromium-browser: Insufficient policy enforcement in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1670760 [ 26 ] Bug #1670759 - CVE-2019-5775 chromium-browser: Insufficient policy enforcement in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1670759 [ 27 ] Bug #1670758 - CVE-2019-5774 chromium-browser: Insufficient validation of untrusted input in SafeBrowsing https://bugzilla.redhat.com/show_bug.cgi?id=1670758 [ 28 ] Bug #1670757 - CVE-2019-5773 chromium-browser: Insufficient data validation in IndexedDB https://bugzilla.redhat.com/show_bug.cgi?id=1670757 [ 29 ] Bug #1670756 - CVE-2019-5772 chromium-browser: Use after free in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1670756 [ 30 ] Bug #1670755 - CVE-2019-5771 chromium-browser: Heap buffer overflow in SwiftShader https://bugzilla.redhat.com/show_bug.cgi?id=1670755 [ 31 ] Bug #1670754 - CVE-2019-5770 chromium-browser: Heap buffer overflow in WebGL https://bugzilla.redhat.com/show_bug.cgi?id=1670754 [ 32 ] Bug #1670753 - CVE-2019-5769 chromium-browser: Insufficient validation of untrusted input in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1670753 [ 33 ] Bug #1670752 - CVE-2019-5768 chromium-browser: Insufficient policy enforcement in DevTools https://bugzilla.redhat.com/show_bug.cgi?id=1670752 [ 34 ] Bug #1670751 - CVE-2019-5767 chromium-browser: Incorrect security UI in WebAPKs https://bugzilla.redhat.com/show_bug.cgi?id=1670751 [ 35 ] Bug #1670750 - CVE-2019-5766 chromium-browser: Insufficient policy enforcement in Canvas https://bugzilla.redhat.com/show_bug.cgi?id=1670750 [ 36 ] Bug #1670749 - CVE-2019-5765 chromium-browser: Insufficient policy enforcement in the browser https://bugzilla.redhat.com/show_bug.cgi?id=1670749 [ 37 ] Bug #1670748 - CVE-2019-5764 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1670748 [ 38 ] Bug #1670747 - CVE-2019-5763 chromium-browser: Insufficient validation of untrusted input in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1670747 [ 39 ] Bug #1670746 - CVE-2019-5762 chromium-browser: Use after free in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1670746 [ 40 ] Bug #1670745 - CVE-2019-5761 chromium-browser: Use after free in SwiftShader https://bugzilla.redhat.com/show_bug.cgi?id=1670745 [ 41 ] Bug #1670744 - CVE-2019-5760 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1670744 [ 42 ] Bug #1670743 - CVE-2019-5759 chromium-browser: Use after free in HTML select elements https://bugzilla.redhat.com/show_bug.cgi?id=1670743 [ 43 ] Bug #1670742 - CVE-2019-5758 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1670742 [ 44 ] Bug #1670741 - CVE-2019-5757 chromium-browser: Type Confusion in SVG https://bugzilla.redhat.com/show_bug.cgi?id=1670741 [ 45 ] Bug #1670740 - CVE-2019-5756 chromium-browser: Use after free in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1670740 [ 46 ] Bug #1670739 - CVE-2019-5755 chromium-browser: Inappropriate implementation in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1670739 [ 47 ] Bug #1670738 - CVE-2019-5782 chromium-browser: Inappropriate implementation in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1670738 [ 48 ] Bug #1670737 - CVE-2019-5754 chromium-browser: Inappropriate implementation in QUIC Networking https://bugzilla.redhat.com/show_bug.cgi?id=1670737 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-05a780936d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 29, 2019
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!