USN-3896-1 — firefox vulnerabilities

Summary

Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, bypass same
origin protections, or execute arbitrary code.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	firefox	65.0.1+build2-0ubuntu0.14.04.1
Ubuntu · 16.04 LTS 16.04:LTS	firefox	65.0.1+build2-0ubuntu0.16.04.1
Ubuntu · 18.04 LTS 18.04:LTS	firefox	65.0.1+build2-0ubuntu0.18.04.1

Vulnerabilities 3

Unscored —

CVE-2018-18356

An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Dec 11, 2018
Unscored —

CVE-2018-18511

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImag…

Mozilla Firefox thunderbird mozjs38 Browsers Debian Ubuntu Alpine

Apr 26, 2019
Unscored —

CVE-2019-5785

Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an…

Google Chrome thunderbird mozjs38 Browsers Debian Ubuntu Alpine

Jun 27, 2019

References

report
https://ubuntu.com/security/CVE-2018-18356
report
https://ubuntu.com/security/CVE-2018-18511
report
https://ubuntu.com/security/CVE-2019-5785

firefox vulnerabilities

Summary

Fixed packages 3

Vulnerabilities 3

An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a …

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImag…

Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an…

References