firefox-esr - security update

Fixed packages 1

Vulnerabilities 7

• Unscored —
  CVE-2016-5290

  Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corru…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-5291

  A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability aff…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-5296

  A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-5297

  An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking iss…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-9064

  Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated…

  Mozilla Firefox Firefox ESR firefox Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-9066 Public exploit EPSS 12%

  A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amou…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-9074

  An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018