Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-12393: 1642183: CVE-2018-12393 Mozilla: Integer overflow during Unicode conversion while loading JavaScript CVE-2018-12392: 1642182: CVE-2018-12392 Mozilla: Crash with nested event loops CVE-2018-12390: 1642180: CVE-2018-12390 Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3 CVE-2018-12389: 1642179: CVE-2018-12389 Mozilla: Memory safety bugs fixed in Firefox ESR 60.3
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | thunderbird | 0:60.2.1-4.amzn2.0.1 |
| Amazon Linux · 2 | thunderbird-debuginfo | 0:60.2.1-4.amzn2.0.1 |
Vulnerabilities 4
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs sh…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some o…
-
Unscored —
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a pote…
-
Unscored —
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an i…