Linux · Security advisory · July 30, 2019

ELSA-2019-1269: firefox security update

ELSA-2019-1269, released July 30, 2019, fixes 13 CVEs in firefox (version 0:60.7.0-1.0.2.el8_0). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
13
12 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0939
95th percentile

Priority of the 13 CVEs

Patch now 0 Urgent 12 High 0 Routine 1

Fixed package versions

ProductReleaseFixed in
firefoxol 80:60.7.0-1.0.2.el8_0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2019-9816 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 5.9 0.0615 None reported
Urgent CVE-2019-5798 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 6.5 0.0321 None reported
Urgent CVE-2019-11693 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 9.8 0.0241 None reported
Urgent CVE-2019-9800 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 9.8 0.0173 None reported
Urgent CVE-2019-9819 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 9.8 0.0169 None reported
Urgent CVE-2019-9820 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 9.8 0.0164 None reported
Urgent CVE-2018-18511 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 4.3 0.0162 None reported
Urgent CVE-2019-11692 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 9.8 0.0160 None reported
Urgent CVE-2019-11691 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 9.8 0.0156 None reported
Urgent CVE-2019-11698 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 6.1 0.0135 None reported
Urgent CVE-2019-9797 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 5.3 0.0111 None reported
Urgent CVE-2019-9817 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This... 5.3 0.0080 None reported
Routine CVE-2019-7317 firefox: png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-freebecause png_image_free_function is called u... 5.3 0.0939 None reported
Showing 1 to 13 of 13 1