Critical ELSA-2019-0671 2 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Mar 28, 2019 · Updated Mar 28, 2019

Ecosystem: Oracle Linux

Summary

[60.6.1-1.0.1]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[60.6.1-1]
- Update to 60.6.1 ESR (Build 1)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:60.6.1-1.0.1.el7_6

Vulnerabilities 2

Unscored —

CVE-2019-9810 Public exploit EPSS 27%

Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 26, 2019
Unscored —

CVE-2019-9813 Public exploit

Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arb…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 26, 2019