Red Hat Security AdvisoryRHSA-2019:0672
firefox security update
Released 2019-03-27 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) firefox-60.6.1-1.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-60.6.1-1.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-60.6.1-1.el6_10
- Red Hat Enterprise Linux Server (v. 6) firefox-60.6.1-1.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-60.6.1-1.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) firefox-60.6.1-1.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-60.6.1-1.el6_10
Fixes 2 records
Priority MEDIUM 60
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.27207 · Published 2019-04-26 · Fixed in 66.0.1, 60.6.1 CWE-119
Priority MEDIUM 48
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.06749 · Published 2019-04-26 · Fixed in 66.0.1, 60.6.1 CWE-843
