Synopsis: Important: firefox security update
Advisory ID: SLSA-2017:3382-1
Issue Date: 2017-12-05
CVE Numbers: CVE-2017-7843
—
This update upgrades Firefox to version 52.5.1 ESR.
Security Fix(es):
* A privacy flaw was discovered in Firefox. In Private Browsing mode, a
web worker could write persistent data to IndexedDB, which was not cleared
when exiting and would persist across multiple sessions. A malicious
website could exploit the flaw to bypass private-browsing protections and
uniquely fingerprint visitors. (CVE-2017-7843)
—
SL6
x86_64
firefox-52.5.1-1.el6_9.x86_64.rpm
firefox-debuginfo-52.5.1-1.el6_9.x86_64.rpm
firefox-52.5.1-1.el6_9.i686.rpm
firefox-debuginfo-52.5.1-1.el6_9.i686.rpm
i386
firefox-52.5.1-1.el6_9.i686.rpm
firefox-debuginfo-52.5.1-1.el6_9.i686.rpm
SL7
x86_64
firefox-52.5.1-1.el7_4.x86_64.rpm
firefox-debuginfo-52.5.1-1.el7_4.x86_64.rpm
firefox-52.5.1-1.el7_4.i686.rpm
firefox-debuginfo-52.5.1-1.el7_4.i686.rpm
– Scientific Linux Development Team
