Linux · 
Ubuntu · Package update · July 10, 2019
Ubuntu · Package update · July 10, 2019firefox-globalmenu 68.0+build3-0ubuntu0.18.04.1: firefox-globalmenu 68.0+build3-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)
firefox-globalmenu 68.0+build3-0ubuntu0.18.04.1, released July 10, 2019, fixes 21 CVEs in firefox-globalmenu. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
21
5 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.2027
97th percentile
Priority of the 21 CVEs
Patch now 0
Urgent 5
High 4
Routine 12
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| firefox-globalmenu | Ubuntu 18.04.6 LTS (bionic) | 68.0+build3-0ubuntu0.18.04.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2019-11730 | firefox: ELSA-2019-1764: firefox security update (CRITICAL) | 6.1 | 0.2027 | None reported |
| Urgent | CVE-2019-9811 | firefox: ELSA-2019-1764: firefox security update (CRITICAL) | 8.3 | 0.0257 | None reported |
| Urgent | CVE-2019-11709 | firefox: ELSA-2019-1764: firefox security update (CRITICAL) | 9.8 | 0.0235 | None reported |
| Urgent | CVE-2019-11717 | firefox: ELSA-2019-1764: firefox security update (CRITICAL) | 6.1 | 0.0213 | None reported |
| Urgent | CVE-2019-11711 | firefox: ELSA-2019-1764: firefox security update (CRITICAL) | 8.8 | 0.0163 | None reported |
| High | CVE-2019-11729 | nspr: ELSA-2019-1951: nss and nspr security, bug fix, and enhancement update (MODERATE) | 7.5 | 0.0279 | None reported |
| High | CVE-2019-11719 | nspr: ELSA-2019-1951: nss and nspr security, bug fix, and enhancement update (MODERATE) | 7.5 | 0.0229 | None reported |
| High | CVE-2019-11713 | thunderbird: ELSA-2019-1799: thunderbird security and bug fix update (IMPORTANT) | 9.8 | 0.0215 | None reported |
| High | CVE-2019-11712 | thunderbird: ELSA-2019-1799: thunderbird security and bug fix update (IMPORTANT) | 8.8 | 0.0105 | None reported |
| Routine | CVE-2019-11727 | nspr: ELSA-2019-1951: nss and nspr security, bug fix, and enhancement update (MODERATE) | 5.3 | 0.0181 | None reported |
| Routine | CVE-2019-11714 | firefox: Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in... | n/a | 0.0171 | None reported |
| Routine | CVE-2019-11710 | firefox: Mozilla developers and community members reported memory safety bugs present in Firefox 67 | n/a | 0.0167 | None reported |
| Routine | CVE-2019-11715 | thunderbird: ELSA-2019-1799: thunderbird security and bug fix update (IMPORTANT) | 6.1 | 0.0150 | None reported |
| Routine | CVE-2019-11721 | firefox: The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar | n/a | 0.0139 | None reported |
| Routine | CVE-2019-11716 | firefox: Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code suc... | n/a | 0.0135 | None reported |
| Routine | CVE-2019-11718 | firefox: Activity Stream can display content from sent from the Snippet Service website | n/a | 0.0124 | None reported |
| Routine | CVE-2019-11725 | firefox: When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation... | n/a | 0.0115 | None reported |
| Routine | CVE-2019-11724 | firefox: Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has be... | n/a | 0.0113 | None reported |
| Routine | CVE-2019-11728 | firefox: The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that... | n/a | 0.0112 | None reported |
| Routine | CVE-2019-11720 | firefox: Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering... | n/a | 0.0109 | None reported |
| Routine | CVE-2019-11723 | firefox: A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of th... | n/a | 0.0081 | None reported |
Showing 1 to 21 of 21
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.