Note to readers

This publication does not currently meet the Government of Canada's Web Standards. The information remains valid.

Mozilla security updates

Number: AV18-077
Date: 09 May 2018

Purpose

The purpose of this advisory is to bring attention to a security update addressing multiple vulnerabilities in Mozilla Firefox.

Assessment

Mozilla have released security updates to address vulnerabilities in Firefox and Firefox ESR.

Affected Versions:

  • Firefox ESR versions prior to 52.8           
  • Firefox versions prior to 60

CVE References:  CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158, CVE-2018-5159, CVE-2018-5160, CVE-2018-5152, CVE-2018-5153, CVE-2018-5163, CVE-2018-5164, CVE-2018-5166, CVE-2018-5167, CVE-2018-5168, CVE-2018-5169, CVE-2018-5172, CVE-2018-5173, CVE-2018-5174,
CVE-2018-5175, CVE-2018-5176, CVE-2018-5177, CVE-2018-5165, CVE-2018-5180, CVE-2018-5181, CVE-2018-5182, CVE-2018-5151, CVE-2018-5150, CVE-2018-5183, CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158, CVE-2018-5159, CVE-2018-5168, CVE-2018-5174, CVE-2018-5178, CVE-2018-5150

Suggested Action

CCIRC recommends that owner/operators test and deploy the vendor released updates to the affected platforms in accordance with their risk mitigation framework.

References:

Date modified: