{"cves":["CVE-2020-6819","CVE-2020-6820"],"cvss":0.0,"database_specific":{"severity":"CRITICAL"},"description":"[68.6.1-1.0.1]\n- fix LD_LIBRARY_PATH\n- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one\n\n[68.6.1-1]\n- Update to 68.6.1 ESR\n\n* Wed Mar 04 2020 Jan Horak jhorak@redhat.com\n- Update to 68.6.0 build1\n\n[68.5.0-3]\n- Added fix for rhbz#1805667\n- Enabled mzbz@1170092 - Firefox prefs at /etc\n\n* Fri Feb 07 2020 Jan Horak jhorak@redhat.com\n- Update to 68.5.0 build2\n\n* Wed Feb 05 2020 Jan Horak jhorak@redhat.com\n- Update to 68.5.0 build1\n\n* Wed Jan 08 2020 Jan Horak jhorak@redhat.com\n- Update to 68.4.1esr build1\n\n* Fri Jan 03 2020 Jan Horak jhorak@redhat.com\n- Update to 68.4.0esr build1\n\n* Wed Dec 18 2019 Jan Horak jhorak@redhat.com\n- Fix for wrong intl.accept_lang when using non en-us langpack\n\n[68.3.0-1]\n- Update to 68.3.0 ESR\n\n[68.2.0-4]\n- Added patch for TLS 1.3 support.\n\n[68.2.0-3]\n- Rebuild\n\n[68.2.0-2]\n- Rebuild\n\n[68.2.0-1]\n- Update to 68.2.0 ESR\n\n[68.1.0-6]\n- Enable system nss on RHEL6\n\n[68.1.0-2]\n- Enable building langpacks\n\n[68.1.0-1]\n- Update to 68.1.0 ESR\n\n[68.0.1-4]\n- Enable system nss\n\n[68.0.1-3]\n- Enable official branding\n\n[68.0.1-2]\n- Enabled PipeWire on RHEL8\n\n[68.0.1-1]\n- Updated to 68.0.1 ESR\n\n[68.0-0.11]\n- Update to 68.0 ESR\n\n[68.0-0.10]\n- Updated to 68.0 alpha 13\n- Enabled second arches\n\n[68.0-0.1]\n- Updated to 68.0 alpha\n\n[60.6.0-3]\n- Added Google API keys (mozbz#1531176)\n\n[60.6.0-2]\n- Update to 60.6.0 ESR (Build 2)\n\n[60.6.0-1]\n- Update to 60.6.0 ESR (Build 1)\n\n[60.5.1-1]\n- Update to 60.5.1 ESR\n\n[60.5.0-3]\n- Added fix for rhbz#1672424 - Firefox crashes on NFS drives.\n\n[60.5.0-2]\n- Updated to 60.5.0 ESR build2\n\n[60.5.0-1]\n- Updated to 60.5.0 ESR build1\n\n[60.4.0-3]\n- Fixing fontconfig warnings (rhbz#1601475)\n\n[60.4.0-2]\n- Added pipewire patch from Tomas Popela (rhbz#1664270)\n\n[60.4.0-1]\n- Update to 60.4.0 ESR\n\n[60.3.0-2]\n- Added firefox-gnome-shell-extension\n\n[60.3.0-1]\n- Update to 60.3.0 ESR\n\n[60.2.2-2]\n- Added patch for rhbz#1633932\n\n[60.2.2-1]\n- Update to 60.2.2 ESR\n\n[60.2.1-1]\n- Update to 60.2.1 ESR\n\n[60.2.0-1]\n- Update to 60.2.0 ESR\n\n[60.1.0-9]\n- Do not set user agent (rhbz#1608065)\n- GTK dialogs are localized now (rhbz#1619373)\n- JNLP association works again (rhbz#1607457)\n\n[60.1.0-8]\n- Fixed homepage and bookmarks (rhbz#1606778)\n- Fixed missing file associations in RHEL6 (rhbz#1613565)\n\n[60.1.0-7]\n- Run at-spi-bus if not running already (for the bundled gtk3)\n\n[60.1.0-6]\n- Fix for missing schemes for bundled gtk3\n\n[60.1.0-5]\n- Added mesa-libEGL dependency to gtk3/rhel6\n\n[60.1.0-4]\n- Disabled jemalloc on all second arches\n\n[60.1.0-3]\n- Updated to 60.1.0 ESR build2\n\n[60.1.0-2]\n- Disabled jemalloc on second arches\n\n[60.1.0-1]\n- Updated to 60.1.0 ESR\n\n[60.0-12]\n- Fixing bundled libffi issues\n- Readded some requirements\n\n[60.0-10]\n- Added fix for mozilla BZ#1436242 - IPC crashes.\n\n[60.0-9]\n- Bundling libffi for the sec-arches\n- Added openssl-devel for the Python\n- Fixing bundled gtk3\n\n[60.0-8]\n- Added fix for mozilla BZ#1458492\n\n[60.0-7]\n- Added patch from rhbz#1498561 to fix ppc64(le) crashes.\n\n[60.0-6]\n- Disabled jemalloc on second arches\n\n[60.0-4]\n- Update to 60.0 ESR\n\n[52.7.0-1]\n- Update to 52.7.0 ESR\n\n[52.6.0-2]\n- Build Firefox for desktop arches only (x86_64 and ppc64le)\n\n[52.6.0-1]\n- Update to 52.6.0 ESR\n\n[52.5.0-1]\n- Update to 52.5.0 ESR\n\n[52.4.0-1]\n- Update to 52.4.0 ESR\n\n[52.3.0-3]\n- Update to 52.3.0 ESR (b2)\n- Require correct nss version\n\n[52.2.0-1]\n- Update to 52.2.0 ESR\n\n[52.1.2-1]\n- Update to 52.1.2 ESR\n\n[52.0-7]\n- Added fix for accept language (rhbz#1454322)\n\n[52.0-6]\n- Removing patch required for older NSS from RHEL 7.3\n- Added patch for rhbz#1414564\n\n[52.0-5]\n- Added fix for mozbz#1348168/CVE-2017-5428\n\n[52.0-4]\n- Update to 52.0 ESR (b4)\n\n[52.0-3]\n- Added fix for rhbz#1423012 - ppc64 gfx crashes\n\n[52.0-2]\n- Enable system nss\n\n[52.0-1]\n- Update to 52.0ESR (B1)\n- Build RHEL7 package for Gtk3\n\n[52.0-0.13]\n- Added fix for rhbz#1414535\n\n[52.0-0.12]\n- Update to 52.0b8\n\n[52.0-0.11]\n- Readded addons patch\n\n[52.0-0.10]\n- Update to 52.0b3\n\n[52.0-0.9]\n- Update to 52.0b2\n\n[52.0-0.8]\n- Update to 52.0b1\n\n[52.0-0.5]\n- Firefox Aurora 52 testing build","id":"ELSA-2020-1339","ovalId":"oval:com.oracle.elsa:def:20201339","source":"oracle_linux","title":"ELSA-2020-1339:  firefox security update (CRITICAL)","url":"https://linux.oracle.com/errata/ELSA-2020-1339.html"}