Red Hat Product Errata RHSA-2020:5104 - Security Advisory
Issued:
2020-11-12
Updated:
2020-11-12

RHSA-2020:5104 - Security Advisory

Synopsis

Critical: firefox security update

Type/Severity

Security Advisory: Critical

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for firefox is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 78.4.1 ESR.

Security Fix(es):

  • Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the update, Firefox must be restarted for the changes to take effect.

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

  • BZ - 1896306 - CVE-2020-26950 Mozilla: Write side effects in MCallGetProperty opcode not accounted for

Red Hat Enterprise Linux Server 6

SRPM
firefox-78.4.1-1.el6_10.src.rpm SHA-256: 1e89432dd559860c053cbf69cafa2c5273a156cd1a7bea3aa5018c2d10f3d185
x86_64
firefox-78.4.1-1.el6_10.x86_64.rpm SHA-256: d2410e04cf8e974f1093e1af8b4435da4d834ddad6b5ead91f954305ac34b478
firefox-78.4.1-1.el6_10.x86_64.rpm SHA-256: d2410e04cf8e974f1093e1af8b4435da4d834ddad6b5ead91f954305ac34b478
firefox-debuginfo-78.4.1-1.el6_10.x86_64.rpm SHA-256: 1c25a1aea8f4744d362ac7f994824499e25398c6defc8958a3e62c54b48f541b
firefox-debuginfo-78.4.1-1.el6_10.x86_64.rpm SHA-256: 1c25a1aea8f4744d362ac7f994824499e25398c6defc8958a3e62c54b48f541b
i386
firefox-78.4.1-1.el6_10.i686.rpm SHA-256: 4a25a5e71d100790b27e6efd4b56beaeea7aa1a3cf5583875eb720baabcf46a9

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
firefox-78.4.1-1.el6_10.src.rpm SHA-256: 1e89432dd559860c053cbf69cafa2c5273a156cd1a7bea3aa5018c2d10f3d185
x86_64
firefox-78.4.1-1.el6_10.x86_64.rpm SHA-256: d2410e04cf8e974f1093e1af8b4435da4d834ddad6b5ead91f954305ac34b478
firefox-debuginfo-78.4.1-1.el6_10.x86_64.rpm SHA-256: 1c25a1aea8f4744d362ac7f994824499e25398c6defc8958a3e62c54b48f541b
i386
firefox-78.4.1-1.el6_10.i686.rpm SHA-256: 4a25a5e71d100790b27e6efd4b56beaeea7aa1a3cf5583875eb720baabcf46a9

Red Hat Enterprise Linux Workstation 6

SRPM
firefox-78.4.1-1.el6_10.src.rpm SHA-256: 1e89432dd559860c053cbf69cafa2c5273a156cd1a7bea3aa5018c2d10f3d185
x86_64
firefox-78.4.1-1.el6_10.x86_64.rpm SHA-256: d2410e04cf8e974f1093e1af8b4435da4d834ddad6b5ead91f954305ac34b478
firefox-debuginfo-78.4.1-1.el6_10.x86_64.rpm SHA-256: 1c25a1aea8f4744d362ac7f994824499e25398c6defc8958a3e62c54b48f541b
i386
firefox-78.4.1-1.el6_10.i686.rpm SHA-256: 4a25a5e71d100790b27e6efd4b56beaeea7aa1a3cf5583875eb720baabcf46a9

Red Hat Enterprise Linux Desktop 6

SRPM
firefox-78.4.1-1.el6_10.src.rpm SHA-256: 1e89432dd559860c053cbf69cafa2c5273a156cd1a7bea3aa5018c2d10f3d185
x86_64
firefox-78.4.1-1.el6_10.x86_64.rpm SHA-256: d2410e04cf8e974f1093e1af8b4435da4d834ddad6b5ead91f954305ac34b478
firefox-debuginfo-78.4.1-1.el6_10.x86_64.rpm SHA-256: 1c25a1aea8f4744d362ac7f994824499e25398c6defc8958a3e62c54b48f541b
i386
firefox-78.4.1-1.el6_10.i686.rpm SHA-256: 4a25a5e71d100790b27e6efd4b56beaeea7aa1a3cf5583875eb720baabcf46a9

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
firefox-78.4.1-1.el6_10.src.rpm SHA-256: 1e89432dd559860c053cbf69cafa2c5273a156cd1a7bea3aa5018c2d10f3d185
s390x
firefox-78.4.1-1.el6_10.s390x.rpm SHA-256: 5f419adb1664601ea4d3dca9516fb8a20c398c8f9a9eb504f34b36cfe89be5cd
firefox-debuginfo-78.4.1-1.el6_10.s390x.rpm SHA-256: 6637611b4ced9c51fb422651ad9ad46fcdf6c999917bad19b0f43347dc6379ed

Red Hat Enterprise Linux for Power, big endian 6

SRPM
firefox-78.4.1-1.el6_10.src.rpm SHA-256: 1e89432dd559860c053cbf69cafa2c5273a156cd1a7bea3aa5018c2d10f3d185
ppc64
firefox-78.4.1-1.el6_10.ppc64.rpm SHA-256: 336a278baeb2f43ce11d6c715a15bfd903ee819c068067aba9ab0ae96ff23cd2
firefox-debuginfo-78.4.1-1.el6_10.ppc64.rpm SHA-256: 88c653bd949ebca2da2ff603f5d14c612f615c85cca368690b26247378c8ad35

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
firefox-78.4.1-1.el6_10.src.rpm SHA-256: 1e89432dd559860c053cbf69cafa2c5273a156cd1a7bea3aa5018c2d10f3d185
x86_64
firefox-78.4.1-1.el6_10.x86_64.rpm SHA-256: d2410e04cf8e974f1093e1af8b4435da4d834ddad6b5ead91f954305ac34b478
firefox-debuginfo-78.4.1-1.el6_10.x86_64.rpm SHA-256: 1c25a1aea8f4744d362ac7f994824499e25398c6defc8958a3e62c54b48f541b

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
firefox-78.4.1-1.el6_10.src.rpm SHA-256: 1e89432dd559860c053cbf69cafa2c5273a156cd1a7bea3aa5018c2d10f3d185
s390x
firefox-78.4.1-1.el6_10.s390x.rpm SHA-256: 5f419adb1664601ea4d3dca9516fb8a20c398c8f9a9eb504f34b36cfe89be5cd
firefox-debuginfo-78.4.1-1.el6_10.s390x.rpm SHA-256: 6637611b4ced9c51fb422651ad9ad46fcdf6c999917bad19b0f43347dc6379ed

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
firefox-78.4.1-1.el6_10.src.rpm SHA-256: 1e89432dd559860c053cbf69cafa2c5273a156cd1a7bea3aa5018c2d10f3d185
x86_64
firefox-78.4.1-1.el6_10.x86_64.rpm SHA-256: d2410e04cf8e974f1093e1af8b4435da4d834ddad6b5ead91f954305ac34b478
firefox-debuginfo-78.4.1-1.el6_10.x86_64.rpm SHA-256: 1c25a1aea8f4744d362ac7f994824499e25398c6defc8958a3e62c54b48f541b
i386
firefox-78.4.1-1.el6_10.i686.rpm SHA-256: 4a25a5e71d100790b27e6efd4b56beaeea7aa1a3cf5583875eb720baabcf46a9

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6

SRPM
firefox-78.4.1-1.el6_10.src.rpm SHA-256: 1e89432dd559860c053cbf69cafa2c5273a156cd1a7bea3aa5018c2d10f3d185
s390x
firefox-78.4.1-1.el6_10.s390x.rpm SHA-256: 5f419adb1664601ea4d3dca9516fb8a20c398c8f9a9eb504f34b36cfe89be5cd
firefox-debuginfo-78.4.1-1.el6_10.s390x.rpm SHA-256: 6637611b4ced9c51fb422651ad9ad46fcdf6c999917bad19b0f43347dc6379ed

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.