Security Vulnerabilities fixed in Firefox RHSA-2019:1604

Description

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.7.2 ESR. Security Fix(es): * Mozilla: Type confusion in Array.pop (CVE-2019-11707) * Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Applications

Firefox

CVE References

CVE-2019-11707 CVE-2019-11708

Other References

https://access.redhat.com/errata/RHSA-2019:1604