Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade thunderbird | Sep 15, 2018 | Nov 4, 2017 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbird | Oct 27, 2018 | Nov 4, 2017 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefox-esrUpgrade libxulUpgrade seamonkeyUpgrade firefoxUpgrade waterfox | Sep 6, 2018 | Sep 5, 2018 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin. | Oct 3, 2018 | Nov 4, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade firefox | Nov 6, 2018 | Nov 4, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade firefox | Sep 27, 2018 | Nov 4, 2017 |
| Mfsa2018 20 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 62.0 | Sep 6, 2018 | Nov 4, 2017 |
| Mfsa2018 21 | — | Upgrade to Mozilla Firefox ESR version 60.2Upgrade to the latest version of Mozilla Firefox | Sep 6, 2018 | Nov 4, 2017 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 60.2.1Upgrade to the latest version of Mozilla Thunderbird | Oct 5, 2018 | Nov 4, 2017 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 60.5.0-11.4.6.0.1.4.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4Upgrade web/browser/firefox to version 60.5.0-11.4.6.0.1.4.0 on Solaris 11.4 | Feb 20, 2019 | Nov 4, 2017 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbird | Nov 2, 2018 | Nov 3, 2017 |
| Redhat_linux | — | Upgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade thunderbird | Sep 13, 2018 | Nov 4, 2017 |
| Suse | — | Upgrade mozillafirefox-branding-sleUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nss-develUpgrade libsoftokn3-32bitUpgrade libfreebl3Upgrade MozillaThunderbirdUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-develUpgrade libsoftokn3Upgrade mozilla-nsprUpgrade apache2-mod_nssUpgrade mozilla-nss-sysinitUpgrade mozilla-nss-sysinit-32bitUpgrade MozillaFirefoxUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-32bitUpgrade libsoftokn3-hmacUpgrade libfreebl3-hmac-32bitUpgrade mozillafirefox-branding-upstreamUpgrade libsoftokn3-hmac-32bitUpgrade MozillaThunderbird-translations-commonUpgrade libfreebl3-hmacUpgrade mozilla-nss-certsUpgrade libfreebl3-32bitUpgrade mozilla-nss | Sep 12, 2018 | Nov 4, 2017 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 19, 2024 | Nov 4, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub