Mozilla Thunderbird Security Advisories (MFSA2018-05, MFSA2018-13) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Thunderbird < 52.8

The version of Thunderbird installed on the remote Windows host is prior to 52.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-13 advisory. - Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues...

openSUSE: Security Advisory for Mozilla (openSUSE-SU-2018:1361-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mozilla Firefox ESR < 52.8

The version of Firefox ESR installed on the remote Windows host is prior to 52.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-12 advisory. - Mozilla developers backported selected changes in the Skia library to the ESR52 branch of Firefox. These changes...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:1319-1)

This update for MozillaFirefox to ESR 52.8 release fixes the following issues: Update to Firefox ESR 52.8 bsc1092548 Security issues fixed : - MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF...

RHEL 6 : firefox (RHSA-2018:1414)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1414 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Oracle Linux 6 : firefox (ELSA-2018-1414)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-1414 advisory. 52.8.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

[SECURITY] [DLA 1376-1] firefox-esr security update

Package : firefox-esr Version : 52.8.0esr-1deb7u1 CVE ID : CVE-2018-5150 CVE-2018-5154 CVE-2018-5155 CVE-2018-5157 CVE-2018-5158 CVE-2018-5159 CVE-2018-5168 CVE-2018-5178 CVE-2018-5183 Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and...

openSUSE: Security Advisory for Mozilla (openSUSE-SU-2018:1212-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : Mozilla Firefox (openSUSE-2018-452)

This update for Mozilla Firefox to 52.8.0 ESR fixes the following issues: Security issssue fixed: bsc1092548, MFSA 2018-12 : - CVE-2018-5183: Backport critical security fixes in Skia - CVE-2018-5154: Use-after-free with SVG animations and clip paths - CVE-2018-5155: Use-after-free with SVG...

[SECURITY] [DSA 4199-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4199-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 10, 2018 https://www.debian.org/security/faq -...

Security fix for the ALT Linux 10 package firefox-esr version 52.8.0-alt1

May 9, 2018 Andrey Cherepanov 52.8.0-alt1 - New ESR version 52.8.0. - Fixes: + CVE-2018-5183 Backport critical security fixes in Skia + CVE-2018-5154 Use-after-free with SVG animations and clip paths + CVE-2018-5155 Use-after-free with SVG animations and text paths + CVE-2018-5157 Same-origin...

CVE-2015-5206

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168...

CVE-2015-5168

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206...

CVE-2015-5168

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206...

CVE-2015-5168

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206...

CVE-2015-5168

CVE-2015-5168 is an unspecified vulnerability in the HTTP/2 experimental feature of Apache Traffic Server 5.3.x before 5.3.2. The connected documents consistently describe it as having unknown impact and attack vectors, distinct from CVE-2015-5206. Affected product: Apache Traffic Server; affecte...

CVE-2016-5168

The CVE-2016-5168 entry concerns Skia as used inside Google Chrome prior to version 50.0.2661.94. The connected documents confirm the vulnerability: a component (Skia) in Chrome enables remote attackers to bypass the Same Origin Policy and obtain sensitive information, implying a cross-origin inf...

CVE-2017-5168

CVE-2017-5168 affects Hanwha Techwin Smart Security Manager (SSM) versions 1.5 and prior (also 1.4 and prior to 1.31). The issue is multiple path traversal flaws in the ActiveMQ Broker service bundled with SSM, where crafted HTTP requests from a malicious page can lead to arbitrary file access on...