Summary
[60.8.0-1.0.1]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | firefox | 0:60.8.0-1.0.1.el7_6 |
Vulnerabilities 8
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some o…
-
Unscored —
When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages …
-
Unscored —
POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS require…
-
Unscored —
A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting …
-
Unscored —
Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and l…
-
Unscored —
A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being use…
-
Unscored —
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other fi…
-
Unscored —
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack …