Security fix for the ALT Linux 10 package firefox-esr version 52.8.0-alt1

May 9, 2018 Andrey Cherepanov 52.8.0-alt1 - New ESR version 52.8.0. - Fixes: + CVE-2018-5183 Backport critical security fixes in Skia + CVE-2018-5154 Use-after-free with SVG animations and clip paths + CVE-2018-5155 Use-after-free with SVG animations and text paths + CVE-2018-5157 Same-origin...

KLA11246 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges, execute arbitrary code, perform XSS attacks and bypass security restrictions. Below is a complete list ...

Security vulnerabilities fixed in Firefox ESR 52.8 — Mozilla

Mozilla developers backported selected changes in the Skia library to the ESR52 branch of Firefox. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. A use-after-free vulnerability can occur while enumerating attributes during SVG...

Debian: Security Advisory (DSA-4199-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

firefox security update

CentOS Errata and Security Advisory CESA-2018:1098 An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Mozilla Firefox ESR memory corruption vulnerability (CNVD-2018-09766)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox ESR versions prior to 52.7. A remote attacker can exploit this vulnerability to execute arbitrary...

firefox security update

52.7.3-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 52.7.3-1 - Update to 52.7.3 ESR...

firefox: Use-after-free in compositor potentially allows code execution

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.7.3 and Firefox 59.0.2...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Mozilla Firefox ESR < 52.7.3

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.7.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-10 advisory. - A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer...

Mozilla Firefox ESR < 52.7.3

The version of Firefox ESR installed on the remote Windows host is prior to 52.7.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-10 advisory. - A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used...

Debian DSA-4153-1 : firefox-esr - security update

It was discovered that a use-after-free in the compositor of Firefox can result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4153. The text itself is copyright C Softwar...

Debian DLA-1321-1 : firefox-esr security update

Jesse Schwartzentruber discovered a use-after-free vulnerability in Firefox, which could be exploited to trigger an application crash or arbitrary code execution. For Debian 7 'Wheezy', these problems have been fixed in version 52.7.3esr-1deb7u1. We recommend that you upgrade your firefox-esr...

[SECURITY] [DLA 1321-1] firefox-esr security update

Package : firefox-esr Version : 52.7.3esr-1deb7u1 CVE ID : CVE-2018-5148 Jesse Schwartzentruber discovered a use-after-free vulnerability in Firefox, which could be exploited to trigger an application crash or arbitrary code execution. For Debian 7 "Wheezy", these problems have been fixed in...

[SECURITY] [DSA 4153-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4153-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 27, 2018 https://www.debian.org/security/faq -...

CVE-2018-5148

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.7.3 and Firefox 59.0.2...

DLA-1321-1 firefox-esr - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1321-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR Security Advisories (MFSA2018-10, MFSA2018-10) - Mac OS X

Mozilla Firefox ESR is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...