Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure. External Reference: https://www.mozilla.org/en-US/security/advisories/mfsa2020-24/#CVE-2020-12425
Acknowledgments: Name: the Mozilla project Upstream: Bruno Keith
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2020-12425
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions Via RHSA-2020:3555 https://access.redhat.com/errata/RHSA-2020:3555
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2020:3557 https://access.redhat.com/errata/RHSA-2020:3557
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.1 Extended Update Support Via RHSA-2020:3559 https://access.redhat.com/errata/RHSA-2020:3559
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2020:4080 https://access.redhat.com/errata/RHSA-2020:4080