Unscored DSA-4376-1 3 CVEs

firefox-esr - security update

Published Jan 30, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	firefox-esr	60.5.0esr-1~deb9u1

Vulnerabilities 3

Unscored —

CVE-2018-18500 Public exploit EPSS 13%

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This resul…

thunderbird mozjs38 mozjs52 firefox Debian Ubuntu Alpine

Feb 5, 2019
Unscored —

CVE-2018-18501

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some o…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 5, 2019
Unscored —

CVE-2018-18505

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communica…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 5, 2019