They've released two versions of Firefox in a span of 2 days. First 67.0.3 on June 18 [1] and 67.0.4 on June 20 [2]. Each release fixes a separate component of

They've released two versions of Firefox in a span of 2 days. First 67.0.3 on June 18 [1] and 67.0.4 on June 20 [2]. Each release fixes a separate component of what seems the same exploit chain, the June 18 release the RCE and the June 20 release the sandbox escape. Link to the June 18 discussion [3]. Link to the first fix: https://hg.mozilla.org/releases/mozilla-release/rev/99a829d2a2a7859b10508b6f05e99780c5e2dc68 https://hg.mozilla.org/releases/mozilla-release/rev/99a829d2... Link to the second fix: https://hg.mozilla.org/releases/mozilla-release/rev/ea5154beddff08b919697e3bed6f38cfe3a3d82f https://hg.mozilla.org/releases/mozilla-release/rev/ea5154be... [1]: https://www.mozilla.org/en-US/firefox/67.0.3/releasenotes/ https://www.mozilla.org/en-US/firefox/67.0.3/releasenotes/ [2]: https://www.mozilla.org/en-US/firefox/67.0.4/releasenotes/ https://www.mozilla.org/en-US/firefox/67.0.4/releasenotes/ [3]: https://news.ycombinator.com/item?id=20218560 https://news.ycombinator.com/item?id=20218560