Vulnerability CVE-2020-15668: Information
Description
A lock was missing when accessing a data structure and importing certificate information into the trust database. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
Severity: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
---|---|---|---|---|---|---|
firefox | sisyphus | 80.0-alt1 | 127.0-alt1 | ALT-PU-2020-2706-1 | 256918 | Fixed |
firefox | p10 | 80.0-alt1 | 118.0.2-alt0.p10.1 | ALT-PU-2020-2706-1 | 256918 | Fixed |
firefox | p9 | 80.0.1-alt0.1.p9 | 105.0.1-alt0.c9.1 | ALT-PU-2020-3442-1 | 262506 | Fixed |
firefox | c10f1 | 80.0-alt1 | 112.0.2-alt0.p10.1 | ALT-PU-2020-2706-1 | 256918 | Fixed |
firefox | c9f2 | 93.0-alt0.p9.1 | 105.0.1-alt0.c9.1 | ALT-PU-2021-3368-1 | 288792 | Fixed |
firefox | p11 | 80.0-alt1 | 126.0.1-alt1 | ALT-PU-2020-2706-1 | 256918 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=1651520 |
|
https://www.mozilla.org/security/advisories/mfsa2020-36/ |
|
https://www.mozilla.org/security/advisories/mfsa2020-39/ |
|