Synopsis

Critical: firefox security update

Type/Severity

Security Advisory: Critical

Topic

An update for firefox is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 78.4.1 ESR.

Security Fix(es):

• Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the update, Firefox must be restarted for the changes to take effect.

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

• BZ - 1896306 - CVE-2020-26950 Mozilla: Write side effects in MCallGetProperty opcode not accounted for

CVEs

• CVE-2020-26950

References

• https://access.redhat.com/security/updates/classification/#critical

Red Hat Enterprise Linux for x86_64 8

SRPM
firefox-78.4.1-1.el8_3.src.rpm	SHA-256: 530d0120fb48f0b0f0c0ff8b74c3fb0e0f5734e5754721ac97bc1b235f9c663f
x86_64
firefox-78.4.1-1.el8_3.x86_64.rpm	SHA-256: a90af6d140d041c5d962ce1a9cf4223471efdc904b8d876e6f72410def6c3436
firefox-debuginfo-78.4.1-1.el8_3.x86_64.rpm	SHA-256: 448277289531930fe636553adbaddd1fe8c0cf563361c057643db0beb6a7067b
firefox-debugsource-78.4.1-1.el8_3.x86_64.rpm	SHA-256: dd629e249616bab076e8a56a6b03d1fa82d5168a4b6a28af2c5eca375c7c0b4d

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
firefox-78.4.1-1.el8_3.src.rpm	SHA-256: 530d0120fb48f0b0f0c0ff8b74c3fb0e0f5734e5754721ac97bc1b235f9c663f
s390x
firefox-78.4.1-1.el8_3.s390x.rpm	SHA-256: 0f9a1be12fc1c323d1dea1c408ec4d9236ee156280d7aea9aaef7471490c140e
firefox-debuginfo-78.4.1-1.el8_3.s390x.rpm	SHA-256: c034d166af76339b626da44976f35861c5397c130df9615648b62957498e55fd
firefox-debugsource-78.4.1-1.el8_3.s390x.rpm	SHA-256: 2ce86ffae5c3b6d6189e6013eed1f510e689ced5f6995466ca442119660123ef

Red Hat Enterprise Linux for Power, little endian 8

SRPM
firefox-78.4.1-1.el8_3.src.rpm	SHA-256: 530d0120fb48f0b0f0c0ff8b74c3fb0e0f5734e5754721ac97bc1b235f9c663f
ppc64le
firefox-78.4.1-1.el8_3.ppc64le.rpm	SHA-256: 7f4752778ae779dff41ddf30a9cda36edfd3b85d78b999f359815baf78403e17
firefox-debuginfo-78.4.1-1.el8_3.ppc64le.rpm	SHA-256: 38ab3bdd42eb42c1d9a2ee5c6856648087a9b68e3b8d00200f1eac36f150f2af
firefox-debugsource-78.4.1-1.el8_3.ppc64le.rpm	SHA-256: 2f8ed9beed62e3266b1e81f42d2e7dc79793abdc1669bade991b7e40f54a561b

Red Hat Enterprise Linux for ARM 64 8

SRPM
firefox-78.4.1-1.el8_3.src.rpm	SHA-256: 530d0120fb48f0b0f0c0ff8b74c3fb0e0f5734e5754721ac97bc1b235f9c663f
aarch64
firefox-78.4.1-1.el8_3.aarch64.rpm	SHA-256: c9a87519c89947da450ad4de0e2791c10438e1017cc443d3bbdd48caeddae860
firefox-debuginfo-78.4.1-1.el8_3.aarch64.rpm	SHA-256: 236867e41345029ff48c926b82f2d8ec1c5a330876d82c1a1aa4aac1ce1877e6
firefox-debugsource-78.4.1-1.el8_3.aarch64.rpm	SHA-256: 49f1d0b86cf34a9945acbb4d1a2872775e96050c8cd32cba7ef49c4d6ee94975