Critical ELSA-2019-0219 3 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Jan 31, 2019 · Updated Jan 31, 2019

Ecosystem: Oracle Linux

Summary

[60.5.0-2.0.1]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[60.5.0-2]
- Updated to 60.5.0 ESR build2

[60.5.0-1]
- Updated to 60.5.0 ESR build1

[60.4.0-3]
- Fixing fontconfig warnings (rhbz#1601475)

[60.4.0-2]
- Added pipewire patch from Tomas Popela (rhbz#1664270)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:60.5.0-2.0.1.el7

Vulnerabilities 3

Unscored —

CVE-2018-18500 Public exploit EPSS 13%

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This resul…

thunderbird mozjs38 mozjs52 firefox Debian Ubuntu Alpine

Feb 5, 2019
Unscored —

CVE-2018-18501

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some o…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 5, 2019
Unscored —

CVE-2018-18505

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communica…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 5, 2019