Holger Fuhrmannek

Red Hat Security Advisory: Mozilla Firefox security update

Red Hat Security Advisory: firefox security update

A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the wr