MGASA-2019-0116

Advisory lineage Upstream: 8 Downstream: 0
Published: 21 Mar 2019, 16:36
Last modified:16 Apr 2026, 04:43

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Mar 2019, 16:36
Published
Vulnerability first disclosed
16 Apr 2026, 04:43
Last Modified
Vulnerability information updated

Description

Updated firefox packages fix security vulnerability Proxy Auto-Configuration file can define localhost access to be proxied (CVE-2018-18506). Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 (CVE-2019-9788). Use-after-free when removing in-use DOM elements (CVE-2019-9790). Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey (CVE-2019-9791). IonMonkey leaks JS_OPTIMIZED_OUT magic value to script (CVE-2019-9792). Improper bounds checks when Spectre mitigations are disabled (CVE-2019-9793). Type-confusion in IonMonkey JIT compiler (CVE-2019-9795). Use-after-free with SMIL animation controller (CVE-2019-9796).

Affected Systems

  • mageia•firefox

    < 60.6.0-2.mga6

  • mageia•firefox-l10n

    < 60.6.0-1.mga6

  • mageia•nspr

    < 4.21-1.mga6

  • mageia•nss

    < 3.36.7-1.1.mga6

  • mageia•rootcerts

    < 20190306.00-1.mga6

References (5)