Mozilla sent Firefox Version 66.0.1 to the release channel today. The update addresses two (2) CVE's rated critical, Firefox ESR has been updated to Version 60.6.1.
The critical flaws were disclosed in the Zero Day Initiative #Pawn2Own event in Vancouver.
Critical
- #CVE-2019-9810: IonMonkey MArraySlice has incorrect alias information
- #CVE-2019-9813: Ionmonkey type confusion with __proto__ mutations
Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox." Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.
No comments:
Post a Comment