- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory                           GLSA 201908-12
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                                           https://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: High
    Title: Mozilla Firefox: Multiple vulnerabilities
     Date: August 15, 2019
     Bugs: #688332, #690626
       ID: 201908-12

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======
Multiple vulnerabilities have been found in Mozilla Firefox, the worst
of which could result in the arbitrary execution of code.

Background
=========
Mozilla Firefox is a popular open-source web browser from the Mozilla
Project.

Affected packages
================
    -------------------------------------------------------------------
     Package              /     Vulnerable     /            Unaffected
    -------------------------------------------------------------------
  1  www-client/firefox           < 60.8.0                  >= 60.8.0 
  2  www-client/firefox-bin       < 60.8.0                  >= 60.8.0 
    -------------------------------------------------------------------
     2 affected packages

Description
==========
Multiple vulnerabilities have been discovered in Mozilla Firefox.
Please review the CVE identifiers referenced below for details.

Impact
=====
A remote attacker could entice a user to view a specially crafted web
page, possibly resulting in the execution of arbitrary code with the
privileges of the process or a Denial of Service condition.

Workaround
=========
There is no known workaround at this time.

Resolution
=========
All Mozilla Firefox users should upgrade to the latest version:

  # emerge --sync
  # emerge --ask --oneshot --verbose ">=www-client/firefox-60.8.0"

All Mozilla Firefox binary users should upgrade to the latest version:

  # emerge --sync
  # emerge --ask --oneshot --verbose ">=www-client/firefox-bin-60.8.0"

References
=========
[  1 ] CVE-2019-11707
       https://nvd.nist.gov/vuln/detail/CVE-2019-11707
[  2 ] CVE-2019-11708
       https://nvd.nist.gov/vuln/detail/CVE-2019-11708
[  3 ] CVE-2019-11709
       https://nvd.nist.gov/vuln/detail/CVE-2019-11709
[  4 ] CVE-2019-11710
       https://nvd.nist.gov/vuln/detail/CVE-2019-11710
[  5 ] CVE-2019-11711
       https://nvd.nist.gov/vuln/detail/CVE-2019-11711
[  6 ] CVE-2019-11712
       https://nvd.nist.gov/vuln/detail/CVE-2019-11712
[  7 ] CVE-2019-11713
       https://nvd.nist.gov/vuln/detail/CVE-2019-11713
[  8 ] CVE-2019-11714
       https://nvd.nist.gov/vuln/detail/CVE-2019-11714
[  9 ] CVE-2019-11715
       https://nvd.nist.gov/vuln/detail/CVE-2019-11715
[ 10 ] CVE-2019-11716
       https://nvd.nist.gov/vuln/detail/CVE-2019-11716
[ 11 ] CVE-2019-11717
       https://nvd.nist.gov/vuln/detail/CVE-2019-11717
[ 12 ] CVE-2019-11718
       https://nvd.nist.gov/vuln/detail/CVE-2019-11718
[ 13 ] CVE-2019-11719
       https://nvd.nist.gov/vuln/detail/CVE-2019-11719
[ 14 ] CVE-2019-11720
       https://nvd.nist.gov/vuln/detail/CVE-2019-11720
[ 15 ] CVE-2019-11721
       https://nvd.nist.gov/vuln/detail/CVE-2019-11721
[ 16 ] CVE-2019-11723
       https://nvd.nist.gov/vuln/detail/CVE-2019-11723
[ 17 ] CVE-2019-11724
       https://nvd.nist.gov/vuln/detail/CVE-2019-11724
[ 18 ] CVE-2019-11725
       https://nvd.nist.gov/vuln/detail/CVE-2019-11725
[ 19 ] CVE-2019-11727
       https://nvd.nist.gov/vuln/detail/CVE-2019-11727
[ 20 ] CVE-2019-11728
       https://nvd.nist.gov/vuln/detail/CVE-2019-11728
[ 21 ] CVE-2019-11729
       https://nvd.nist.gov/vuln/detail/CVE-2019-11729
[ 22 ] CVE-2019-11730
       https://nvd.nist.gov/vuln/detail/CVE-2019-11730
[ 23 ] CVE-2019-9811
       https://nvd.nist.gov/vuln/detail/CVE-2019-9811
[ 24 ] MFSA2019-18
       https://www.mozilla.org/en-US/security/advisories/mfsa2019-18/
[ 25 ] MFSA2019-19
       https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/
[ 26 ] MFSA2019-21
       https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/
[ 27 ] MFSA2019-22
       https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/

Availability
===========
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

 https://security.gentoo.org/glsa/201908-12

Concerns?
========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.

License
======
Copyright 2019 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5/

Gentoo: GLSA-201908-12: Mozilla Firefox: Multiple vulnerabilities

Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.

Summary

Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details.

Resolution

All Mozilla Firefox users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/firefox-60.8.0"
All Mozilla Firefox binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/firefox-bin-60.8.0"

References

[ 1 ] CVE-2019-11707 https://nvd.nist.gov/vuln/detail/CVE-2019-11707 [ 2 ] CVE-2019-11708 https://nvd.nist.gov/vuln/detail/CVE-2019-11708 [ 3 ] CVE-2019-11709 https://nvd.nist.gov/vuln/detail/CVE-2019-11709 [ 4 ] CVE-2019-11710 https://nvd.nist.gov/vuln/detail/CVE-2019-11710 [ 5 ] CVE-2019-11711 https://nvd.nist.gov/vuln/detail/CVE-2019-11711 [ 6 ] CVE-2019-11712 https://nvd.nist.gov/vuln/detail/CVE-2019-11712 [ 7 ] CVE-2019-11713 https://nvd.nist.gov/vuln/detail/CVE-2019-11713 [ 8 ] CVE-2019-11714 https://nvd.nist.gov/vuln/detail/CVE-2019-11714 [ 9 ] CVE-2019-11715 https://nvd.nist.gov/vuln/detail/CVE-2019-11715 [ 10 ] CVE-2019-11716 https://nvd.nist.gov/vuln/detail/CVE-2019-11716 [ 11 ] CVE-2019-11717 https://nvd.nist.gov/vuln/detail/CVE-2019-11717 [ 12 ] CVE-2019-11718 https://nvd.nist.gov/vuln/detail/CVE-2019-11718 [ 13 ] CVE-2019-11719 https://nvd.nist.gov/vuln/detail/CVE-2019-11719 [ 14 ] CVE-2019-11720 https://nvd.nist.gov/vuln/detail/CVE-2019-11720 [ 15 ] CVE-2019-11721 https://nvd.nist.gov/vuln/detail/CVE-2019-11721 [ 16 ] CVE-2019-11723 https://nvd.nist.gov/vuln/detail/CVE-2019-11723 [ 17 ] CVE-2019-11724 https://nvd.nist.gov/vuln/detail/CVE-2019-11724 [ 18 ] CVE-2019-11725 https://nvd.nist.gov/vuln/detail/CVE-2019-11725 [ 19 ] CVE-2019-11727 https://nvd.nist.gov/vuln/detail/CVE-2019-11727 [ 20 ] CVE-2019-11728 https://nvd.nist.gov/vuln/detail/CVE-2019-11728 [ 21 ] CVE-2019-11729 https://nvd.nist.gov/vuln/detail/CVE-2019-11729 [ 22 ] CVE-2019-11730 https://nvd.nist.gov/vuln/detail/CVE-2019-11730 [ 23 ] CVE-2019-9811 https://nvd.nist.gov/vuln/detail/CVE-2019-9811 [ 24 ] MFSA2019-18 https://www.mozilla.org/en-US/security/advisories/mfsa2019-18/ [ 25 ] MFSA2019-19 https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/ [ 26 ] MFSA2019-21 https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/ [ 27 ] MFSA2019-22 https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201908-12

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity
Severity: High
Title: Mozilla Firefox: Multiple vulnerabilities
Date: August 15, 2019
Bugs: #688332, #690626
ID: 201908-12

Synopsis

Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.

Background

Mozilla Firefox is a popular open-source web browser from the Mozilla Project.

Affected Packages

------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-client/firefox < 60.8.0 >= 60.8.0 2 www-client/firefox-bin < 60.8.0 >= 60.8.0 ------------------------------------------------------------------- 2 affected packages

Impact

===== A remote attacker could entice a user to view a specially crafted web page, possibly resulting in the execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Related News

23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved