Synopsis: Critical: firefox security update Advisory ID: SLSA-2019:0218-1 Issue Date: 2019-01-30 CVE Numbers: CVE-2018-18500 CVE-2018-18501 CVE-2018-18505 -- This update upgrades Firefox to version 60.5.0 ESR. Security Fix(es): * Mozilla: Use-after-free parsing HTML5 stream (CVE-2018-18500) * Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 (CVE-2018-18501) * Mozilla: Privilege escalation through IPC channel messages (CVE-2018-18505) -- SL6 x86_64 firefox-60.5.0-2.el6.x86_64.rpm firefox-60.5.0-2.el6.i686.rpm i386 firefox-60.5.0-2.el6.i686.rpm - Scientific Linux Development Team