[ASA-201910-16] firefox: multiple issues

🗓️ 26 Oct 2019 00:00:00Reported by ArchLinuxType

archlinux

archlinux🔗 security.archlinux.org👁 41 Views

firefox multiple security issues, critical severity, update to version 70.0-1 necessary to fi

Reporter	Title	Published	Views	Family All 748
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Expat component shipped with IBM Rational ClearCase (CVE-2019-15903)	27 Mar 202014:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Monitoring Basic Services component (CVE-2019-15903)	12 Feb 202015:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Prospect is affected by Expat XML Parser vulnerability (CVE-2019-15903)	2 Jun 202016:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozzila Firefox (less than Firefox 68.2.0 ESR) have affected Synthetic Playback Agent 8.1.4.0 - 8.1.4 IF09	19 Dec 201905:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozzila Firefox (less than Firefox 68.2.0 ESR) have affected Synthetic Playback Agent 8.1.4.0 - 8.1.4 IF09 + ICAM Synthetic 3.0	19 Dec 201905:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by libexpat vulnerabilities (CVE-2018-20843, CVE-2019-15903)	3 Mar 202116:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	2 Feb 202122:11	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Expat affects IBM Netezza Analytics	11 Feb 202006:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affects IBM Engineering Requirements Management DOORS Next	18 Jun 202021:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Bootable Media Creator (BoMC) is affected by vulnerabilities in libexpat	21 Jun 202120:26	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	firefox	70.0-1	firefox-70.0-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-1055
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2019-34/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2019-34/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2019-34/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2019-35/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2019-34/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2019-35/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi

26 Oct 2019 00:00Current

0.2Low risk

Vulners AI Score0.2

CVSS 26.8

CVSS 3.16.5 - 8.8

EPSS0.0213

SSVC

firefox multiple issues critical arbitrary code execution access restriction bypass denial of service insufficient validation same-origin policy bypass