Red Hat Security Advisory

RHSA-2019:0671

firefox security update

Released 2019-03-27 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) firefox-60.6.1-1.el7_6
Red Hat Enterprise Linux Client Optional (v. 7) firefox-60.6.1-1.el7_6
Red Hat Enterprise Linux Server (v. 7) firefox-60.6.1-1.el7_6
Red Hat Enterprise Linux Server Optional (v. 7) firefox-60.6.1-1.el7_6
Red Hat Enterprise Linux Workstation (v. 7) firefox-60.6.1-1.el7_6
Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-60.6.1-1.el7_6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) firefox-60.6.1-1.el7_6

TI-2019-07196 CVE-2019-9810 · GHSA-j339-cxg8-wjf2

MEDIUM 60

Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.27207 Published 2019-04-26 Fixed in 66.0.1, 60.6.1 CWE-119

TI-2019-07199 CVE-2019-9813 · GHSA-qxrm-24v6-5c8c

MEDIUM 48

Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.06749 Published 2019-04-26 Fixed in 66.0.1, 60.6.1 CWE-843