# firefox 68.0+build3-0ubuntu0.18.04.1: firefox 68.0+build3-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) firefox 68.0+build3-0ubuntu0.18.04.1, released July 10, 2019, fixes 21 CVEs in firefox. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-68.0-build3-0ubuntu0.18.04.1 - Platform: Linux - Released: Jul 10, 2019 - Priority: Urgent (Closes CVE-2019-11730, rated Critical) - CVEs: 21, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [firefox](https://patchblox.com/security/data/product/linux/firefox.md) | Ubuntu 18.04.6 LTS (bionic) | 68.0+build3-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2019-11730](https://patchblox.com/security/data/cve/CVE-2019-11730.md) | Urgent | firefox: ELSA-2019-1764: firefox security update (CRITICAL) | 6.1 | 0.2027 | | | [CVE-2019-9811](https://patchblox.com/security/data/cve/CVE-2019-9811.md) | Urgent | firefox: ELSA-2019-1764: firefox security update (CRITICAL) | 8.3 | 0.0257 | | | [CVE-2019-11709](https://patchblox.com/security/data/cve/CVE-2019-11709.md) | Urgent | firefox: ELSA-2019-1764: firefox security update (CRITICAL) | 9.8 | 0.0235 | | | [CVE-2019-11717](https://patchblox.com/security/data/cve/CVE-2019-11717.md) | Urgent | firefox: ELSA-2019-1764: firefox security update (CRITICAL) | 6.1 | 0.0213 | | | [CVE-2019-11711](https://patchblox.com/security/data/cve/CVE-2019-11711.md) | Urgent | firefox: ELSA-2019-1764: firefox security update (CRITICAL) | 8.8 | 0.0163 | | | [CVE-2019-11729](https://patchblox.com/security/data/cve/CVE-2019-11729.md) | High | nspr: ELSA-2019-1951: nss and nspr security, bug fix, and enhancement update (MODERATE) | 7.5 | 0.0279 | | | [CVE-2019-11719](https://patchblox.com/security/data/cve/CVE-2019-11719.md) | High | nspr: ELSA-2019-1951: nss and nspr security, bug fix, and enhancement update (MODERATE) | 7.5 | 0.0229 | | | [CVE-2019-11713](https://patchblox.com/security/data/cve/CVE-2019-11713.md) | High | thunderbird: ELSA-2019-1799: thunderbird security and bug fix update (IMPORTANT) | 9.8 | 0.0215 | | | [CVE-2019-11712](https://patchblox.com/security/data/cve/CVE-2019-11712.md) | High | thunderbird: ELSA-2019-1799: thunderbird security and bug fix update (IMPORTANT) | 8.8 | 0.0105 | | | [CVE-2019-11727](https://patchblox.com/security/data/cve/CVE-2019-11727.md) | Routine | nspr: ELSA-2019-1951: nss and nspr security, bug fix, and enhancement update (MODERATE) | 5.3 | 0.0181 | | | [CVE-2019-11714](https://patchblox.com/security/data/cve/CVE-2019-11714.md) | Routine | firefox: Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in... | n/a | 0.0171 | | | [CVE-2019-11710](https://patchblox.com/security/data/cve/CVE-2019-11710.md) | Routine | firefox: Mozilla developers and community members reported memory safety bugs present in Firefox 67 | n/a | 0.0167 | | | [CVE-2019-11715](https://patchblox.com/security/data/cve/CVE-2019-11715.md) | Routine | thunderbird: ELSA-2019-1799: thunderbird security and bug fix update (IMPORTANT) | 6.1 | 0.0150 | | | [CVE-2019-11721](https://patchblox.com/security/data/cve/CVE-2019-11721.md) | Routine | firefox: The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar | n/a | 0.0139 | | | [CVE-2019-11716](https://patchblox.com/security/data/cve/CVE-2019-11716.md) | Routine | firefox: Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code suc... | n/a | 0.0135 | | | [CVE-2019-11718](https://patchblox.com/security/data/cve/CVE-2019-11718.md) | Routine | firefox: Activity Stream can display content from sent from the Snippet Service website | n/a | 0.0124 | | | [CVE-2019-11725](https://patchblox.com/security/data/cve/CVE-2019-11725.md) | Routine | firefox: When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation... | n/a | 0.0115 | | | [CVE-2019-11724](https://patchblox.com/security/data/cve/CVE-2019-11724.md) | Routine | firefox: Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has be... | n/a | 0.0113 | | | [CVE-2019-11728](https://patchblox.com/security/data/cve/CVE-2019-11728.md) | Routine | firefox: The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that... | n/a | 0.0112 | | | [CVE-2019-11720](https://patchblox.com/security/data/cve/CVE-2019-11720.md) | Routine | firefox: Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering... | n/a | 0.0109 | | | [CVE-2019-11723](https://patchblox.com/security/data/cve/CVE-2019-11723.md) | Routine | firefox: A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of th... | n/a | 0.0081 | | --- Data as of 2026-11-12T07:53:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.