Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5188: 1595040: CVE-2018-5188 Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 CVE-2018-12374: 1598543: CVE-2018-12374 thunderbird: Using form to exfiltrate encrypted mail part by pressing enter in form field CVE-2018-12373: 1598529: CVE-2018-12373 thunderbird: S/MIME plaintext can be leaked through HTML reply/forward CVE-2018-12372: 1598538: CVE-2018-12372 thunderbird: S/MIME and PGP decryption oracles can be built with HTML emails CVE-2018-12366: 1595031: CVE-2018-12366 Mozilla: Invalid data handling during QCMS transformations CVE-2018-12365: 1595030: CVE-2018-12365 Mozilla: Compromised IPC child process can list local filenames CVE-2018-12364: 1595029: CVE-2018-12364 Mozilla: CSRF attacks through 307 redirects and NPAPI plugins CVE-2018-12363: 1595028: CVE-2018-12363 Mozilla: Use-after-free when appending DOM nodes CVE-2018-12362: 1595027: CVE-2018-12362 Mozilla: Integer overflow in SSSE3 scaler CVE-2018-12360: 1595025: CVE-2018-12360 Mozilla: Use-after-free using focus() CVE-2018-12359: 1595024: CVE-2018-12359 Mozilla: Buffer overflow using computed size of canvas element
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | thunderbird | 0:52.9.1-1.amzn2 |
| Amazon Linux · 2 | thunderbird-debuginfo | 0:52.9.1-1.amzn2 |
Vulnerabilities 11
-
Unscored —
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dy…
-
Unscored —
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by fo…
-
Unscored —
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) s…
-
Unscored —
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resultin…
-
Unscored —
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin P…
-
Unscored —
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system…
-
Unscored —
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a …
-
Unscored —
Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply…
-
Unscored —
dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forw…
-
Unscored —
Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text …
-
Unscored —
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of m…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12359.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12360.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12362.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12363.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12364.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12365.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12366.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12372.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12373.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12374.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-5188.html