Unscored DSA-4354-1 6 CVEs

firefox-esr - security update

Published Dec 12, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	firefox-esr	60.4.0esr-1~deb9u1

Vulnerabilities 6

Unscored —

CVE-2018-12405

Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some o…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Feb 28, 2019
Unscored —

CVE-2018-17466

Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out …

Google Chrome chromium-browser thunderbird Browsers Debian Ubuntu

Nov 14, 2018
Unscored —

CVE-2018-18492

A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select eleme…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Feb 28, 2019
Unscored —

CVE-2018-18493

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D a…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Feb 28, 2019
Unscored —

CVE-2018-18494

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location proper…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Feb 28, 2019
Unscored —

CVE-2018-18498

A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a ra…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Feb 28, 2019