Advisories » MGASA-2019-0202

Updated firefox packages fix security vulnerability

Publication date: 02 Jul 2019
Modification date: 02 Jul 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2019-11708

Description

Updated firefox packages fix a security vulnerability thats being
exploited in the wild:

sandbox escape using Prompt:Open. (CVE-2019-11708)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=24983
• https://www.mozilla.org/en-US/firefox/60.7.2/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11708

SRPMS

6/core

• firefox-60.7.2-1.mga6
• firefox-l10n-60.7.2-1.mga6