MGASA-2019-0376

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2019-0376.html

Import Source

https://advisories.mageia.org/MGASA-2019-0376.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2019-0376

Related

Published

2019-12-08T18:12:18Z

Modified

2019-12-08T17:55:40Z

Summary

Updated firefox packages fix security vulnerabilities

Details

Updated firefox packages fix security vulnerabilities:

Stack corruption due to incorrect number of arguments in WebRTC code. (CVE-2019-13722)

Buffer overflow in plain text serializer. (CVE-2019-17005)

Use-after-free in worker destruction. (CVE-2019-17008)

Updater temporary files accessible to unprivileged processes. (CVE-2019-17009)

Use-after-free when performing device orientation checks. (CVE-2019-17010)

Use-after-free when retrieving a document in antitracking. (CVE-2019-17011)

Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3. (CVE-2019-17012)

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

68.3.0-1.mga7

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

68.3.0-1.mga7

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.24-1.mga7

{
    "section": "core"
}