Red Hat Security Advisory: firefox security update

Fixed packages 8

Vulnerabilities 6

• Unscored —
  CVE-2018-12405

  Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some o…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Feb 28, 2019
• Unscored —
  CVE-2018-17466

  Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out …

  Google Chrome chromium-browser thunderbird Browsers Debian Ubuntu
  Nov 14, 2018
• Unscored —
  CVE-2018-18492

  A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select eleme…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Feb 28, 2019
• Unscored —
  CVE-2018-18493

  A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Feb 28, 2019
• Unscored —
  CVE-2018-18494

  A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location proper…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Feb 28, 2019
• Unscored —
  CVE-2018-18498

  A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a ra…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Feb 28, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1640102
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1658397
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1658399
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1658400
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1658401
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1658402
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3831.json
• report
  https://access.redhat.com/security/cve/CVE-2018-12405
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-12405
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-12405
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-12405
• report
  https://access.redhat.com/security/cve/CVE-2018-17466
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-17466
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-17466
• article
  https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2018-18492
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18492
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18492
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-18492
• report
  https://access.redhat.com/security/cve/CVE-2018-18493
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18493
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18493
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-18493
• report
  https://access.redhat.com/security/cve/CVE-2018-18494
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18494
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18494
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-18494
• report
  https://access.redhat.com/security/cve/CVE-2018-18498
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18498
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18498
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-18498