Avatar for Username

Kërkoni te Asistenca

Shmangni karremëzime gjoja asistence. S’do t’ju kërkojmë kurrë të bëni një thirrje apo të dërgoni tekst te një numër telefoni, apo të na jepni të dhëna personale. Ju lutemi, raportoni veprimtari të dyshimtë duke përdorur mundësinë “Raportoni Abuzim”.

Mësoni Më Tepër

Kjo rrjedhë është arkivuar. Ju lutemi, bëni një pyetje të re, nëse keni nevojë për ndihmë.

When will CVE-2019-11754 will be patched on ESR 68 ?

  • 3 përgjigje
  • 1 e ka hasur këtë problem
  • 3 parje
  • Përgjigjja më e re nga philipp

ilan.drory
ilan.drory
more options

Dear All From what I see this Vulnerability , is only patched in 69.0.1 https://www.mozilla.org/en-US/security/advisories/mfsa2019-31/ But there have been later ESR 68.2.0 patched released that does not have this mitigated . Will 68 channel ever will get this patched , or will we need to wait for ESR 69 ? When is that supposed to be released ?

Dear All From what I see this Vulnerability , is only patched in 69.0.1 https://www.mozilla.org/en-US/security/advisories/mfsa2019-31/ But there have been later ESR 68.2.0 patched released that does not have this mitigated . Will 68 channel ever will get this patched , or will we need to wait for ESR 69 ? When is that supposed to be released ?

Zgjidhje e zgjedhur

the bug referenced in https://www.mozilla.org/en-US/security/advisories/mfsa2019-31/ hasn't been made public yet unfortunately, so you won't be able to confirm this by yourself yet :-/

the underlying cause was just introduced in Firefox 69 though, so 69.0 is the only version affected by this vulnerability.

Lexojeni këtë përgjigje brenda kontekstit 👍 1

Krejt Përgjigjet (3)

philipp
philipp
  • Moderator
more options

hello, firefox 68esr is not affected by CVE-2019-11754.

ilan.drory
ilan.drory I zoti i pyetjes
more options

Thanks

From this source where many security tools gather their information for baseline scans (e.g. Qualys and such) it says that this is affected FF under 69.0.1 and does not mention ESR the same as CVE-2019-11753 for example: https://www.cvedetails.com/vulnerability-list/vendor_id-452/product_id-3264/Mozilla-Firefox.html

is there any place on line that confirm that this vuln does not affect ESR 68 ?

philipp
philipp
  • Moderator
more options

Zgjidhja e Zgjedhur

the bug referenced in https://www.mozilla.org/en-US/security/advisories/mfsa2019-31/ hasn't been made public yet unfortunately, so you won't be able to confirm this by yourself yet :-/

the underlying cause was just introduced in Firefox 69 though, so 69.0 is the only version affected by this vulnerability.