Red Hat Security Advisory

RHSA-2019:0374

firefox security update

Released 2019-02-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) firefox-60.5.1-1.el7_6
Red Hat Enterprise Linux Client Optional (v. 7) firefox-60.5.1-1.el7_6
Red Hat Enterprise Linux Server (v. 7) firefox-60.5.1-1.el7_6
Red Hat Enterprise Linux Server Optional (v. 7) firefox-60.5.1-1.el7_6
Red Hat Enterprise Linux Workstation (v. 7) firefox-60.5.1-1.el7_6
Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-60.5.1-1.el7_6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) firefox-60.5.1-1.el7_6

Fixes 2 records

TI-2018-12975 CVE-2018-18356 · GHSA-x2cw-grr7-xm95

Integer overflow in Google Chrome

MEDIUM 44

An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03277 Published 2018-12-11 Fixed in 71.0.3578.80 CWE-190

TI-2019-04097 CVE-2019-5785 · GHSA-qvc8-jrj2-3cc3

Out-of-bounds write in Google Chrome

LOW 31

Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01146 Published 2019-06-27 Fixed in 72.0.3626.81 CWE-787