Red Hat Security Advisory: firefox security update

Fixed packages 3

Vulnerabilities 2

• Critical 10.0
  CVE-2019-11708 Exploited Public exploit EPSS 56%

  Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

  KEV May 23, 2022
• High 8.8
  CVE-2019-11707 Exploited Public exploit EPSS 38%

  A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

  KEV May 23, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-18/
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1721789
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1722673
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1696.json
• report
  https://access.redhat.com/security/cve/CVE-2019-11707
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11707
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11707
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-18/#CVE-2019-11707
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2019-11708
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11708
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11708
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/#CVE-2019-11708