Red Hat Security Advisory: firefox security update

Fixed packages 14

Vulnerabilities 11

• Unscored —
  CVE-2018-5089

  Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corru…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2018-5091

  A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results …

  Mozilla Firefox Firefox ESR firefox Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2018-5095

  An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2018-5096

  A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially ex…

  Mozilla Thunderbird Firefox ESR thunderbird Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2018-5097

  A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2018-5098

  A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script cont…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2018-5099

  A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2018-5102

  A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a poten…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2018-5103

  A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This resu…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2018-5104

  A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, re…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2018-5117

  If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to s…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537417
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537814
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537817
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537818
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537819
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537820
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537821
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537822
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537823
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537824
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537825
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0122.json
• report
  https://access.redhat.com/security/cve/CVE-2018-5089
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5089
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5089
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5089
• report
  https://access.redhat.com/security/cve/CVE-2018-5091
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5091
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5091
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5091
• report
  https://access.redhat.com/security/cve/CVE-2018-5095
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5095
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5095
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5095
• report
  https://access.redhat.com/security/cve/CVE-2018-5096
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5096
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5096
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5096
• report
  https://access.redhat.com/security/cve/CVE-2018-5097
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5097
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5097
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5097
• report
  https://access.redhat.com/security/cve/CVE-2018-5098
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5098
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5098
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5098