This update upgrades Firefox to version 60.5.0 ESR. * Mozilla: Use-after-free parsing HTML5 stream (CVE-2018-18500) * Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 (CVE-2018-18501) * Mozilla: Privilege escalation through IPC channel messages (CVE-2018-18505) SL6 x86_64 firefox-60.5.0-2.el6.x86_64.rpm firefox-60.5.0-2.el6.i686.rpm i386 firefox-60.5.0-2.e [More...]. Synopsis: Critical: firefox security update Advisory ID: SLSA-2019:0218-1 Issue Date: 2019-01-30 CVE Numbers: CVE-2018-18500 CVE-2018-18501 CVE-2018-18505 -- This update upgrades Firefox to version 60.5.0 ESR. Security Fix(es): * Mozilla: Use-after-free parsing HTML5 stream (CVE-2018-18500) * Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 (CVE-2018-18501) * Mozilla: Privilege escalation through IPC channel messages (CVE-2018-18505) -- SL6 x86_64 firefox-60.5.0-2.el6.x86_64.rpm firefox-60.5.0-2.el6.i686.rpm i386 firefox-60.5.0-2.el6.i686.rpm - Scientific Linux Development Team . Investigate the significant Firefox upgrade for Scientific Linux SL6.x that tackles various security vulnerabilities. Maintain your safety!. firefox update, security advisory, memory safety, critical advisory. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.