Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2018:4112-1
HistoryDec 13, 2018 - 12:09 p.m.

Security update for Mozilla Firefox (important)

2018-12-1312:09:13
lists.opensuse.org
40

0.019 Low

EPSS

Percentile

87.0%

JSON

This update to Mozilla Firefox 60.4.0 ESR fixes security issues and bugs.

Security issues fixed as part of the MFSA 2018-30 advisory (boo#1119105):

  • CVE-2018-17466: Buffer overflow and out-of-bounds read in ANGLE library
    with TextureStorage11
  • CVE-2018-18492: Use-after-free with select element
  • CVE-2018-18493: Buffer overflow in accelerated 2D canvas with Skia
  • CVE-2018-18494: Same-origin policy violation using location attribute
    and performance.getEntries to steal cross-origin URLs
  • CVE-2018-18498: Integer overflow when calculating buffer sizes for images
  • CVE-2018-12405: Memory safety bugs fixed in Firefox 64 and Firefox ESR
    60.4

The following changes are included:

  • now requires NSS >= 3.36.6
  • Updated list of currency codes to include Unidad Previsional (UYW)
OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.0x86_64mozillafirefox-debugsource< 60.4.0-lp150.3.30.1MozillaFirefox-debugsource-60.4.0-lp150.3.30.1.x86_64.rpm
openSUSE Leap15.0x86_64mozillafirefox-buildsymbols< 60.4.0-lp150.3.30.1MozillaFirefox-buildsymbols-60.4.0-lp150.3.30.1.x86_64.rpm
openSUSE Leap15.0x86_64mozillafirefox-branding-upstream< 60.4.0-lp150.3.30.1MozillaFirefox-branding-upstream-60.4.0-lp150.3.30.1.x86_64.rpm
openSUSE Leap15.0x86_64mozillafirefox-translations-common< 60.4.0-lp150.3.30.1MozillaFirefox-translations-common-60.4.0-lp150.3.30.1.x86_64.rpm
openSUSE Leap15.0x86_64mozillafirefox-devel< 60.4.0-lp150.3.30.1MozillaFirefox-devel-60.4.0-lp150.3.30.1.x86_64.rpm
openSUSE Leap15.0x86_64mozillafirefox-debuginfo< 60.4.0-lp150.3.30.1MozillaFirefox-debuginfo-60.4.0-lp150.3.30.1.x86_64.rpm
openSUSE Leap42.3x86_64mozillafirefox-devel< 60.4.0-125.1MozillaFirefox-devel-60.4.0-125.1.x86_64.rpm
openSUSE Leap42.3x86_64mozillafirefox-translations-other< 60.4.0-125.1MozillaFirefox-translations-other-60.4.0-125.1.x86_64.rpm
openSUSE Leap42.3x86_64mozillafirefox< 60.4.0-125.1MozillaFirefox-60.4.0-125.1.x86_64.rpm
openSUSE Leap42.3x86_64mozillafirefox-branding-upstream< 60.4.0-125.1MozillaFirefox-branding-upstream-60.4.0-125.1.x86_64.rpm
Rows per page:
1-10 of 161

Related

nessus 54
altlinux 2
osv 5
oraclelinux 4
mozilla 3
openvas 34
redhat 5
debian 4
centos 4
ibm 1
kaspersky 3
slackware 1
amazon 1
mageia 1
suse 6
ubuntu 2
freebsd 1
archlinux 2
gentoo 2
veracode 6
prion 6
attackerkb 1
cve 6
redhatcve 6
debiancve 6
ubuntucve 6
myhack58 1
threatpost 1
chrome 1
fedora 2
nessus
nessus
Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20181217)
2018-12-27 00:00:00
Oracle Linux 7 : thunderbird (ELSA-2019-0160)
2019-01-25 00:00:00
openSUSE Security Update : Mozilla Firefox (openSUSE-2018-1544)
2018-12-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 60.4.0-alt1
2018-12-24 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 60.4.0-alt1
2018-12-11 00:00:00
osv
osv
firefox-esr - security update
2018-12-13 00:00:00
thunderbird - security update
2019-01-02 00:00:00
firefox-esr - security update
2018-12-12 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2019-01-25 00:00:00
firefox security update
2018-12-18 00:00:00
thunderbird security update
2019-01-25 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 60.4 — Mozilla
2018-12-21 00:00:00
Security vulnerabilities fixed in Firefox ESR 60.4 — Mozilla
2018-12-11 00:00:00
Security vulnerabilities fixed in Firefox 64 — Mozilla
2018-12-11 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4362-1)
2018-12-31 00:00:00
CentOS Update for firefox CESA-2018:3831 centos6
2018-12-25 00:00:00
Debian: Security Advisory (DSA-4354-1)
2018-12-11 00:00:00
redhat
redhat
(RHSA-2018:3831) Critical: firefox security update
2018-12-17 13:56:10
(RHSA-2018:3833) Critical: firefox security update
2018-12-17 14:10:13
(RHSA-2019:0159) Important: thunderbird security update
2019-01-24 21:47:18
debian
debian
[SECURITY] [DLA 1605-1] firefox-esr security update
2018-12-13 09:12:03
[SECURITY] [DSA 4354-1] firefox-esr security update
2018-12-12 21:08:52
[SECURITY] [DSA 4330-1] chromium-browser security update
2018-11-02 11:47:45
centos
centos
thunderbird security update
2019-02-01 23:12:43
firefox security update
2018-12-21 19:08:51
thunderbird security update
2019-02-01 23:14:30
ibm
ibm
Security Bulletin: Multiple Mozilla Firefox vulnerabilities in IBM SONAS
2019-05-02 08:10:01
kaspersky
kaspersky
KLA11406 Multiple vulnerabilities in Mozilla Thunderbird
2018-12-21 00:00:00
KLA11389 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR
2018-12-11 00:00:00
KLA11338 Multiple vulnerabilities in Google Chrome
2018-10-16 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2018-12-12 04:59:01
amazon
amazon
Critical: thunderbird
2019-03-07 05:55:00
mageia
mageia
Updated firefox packages fix security vulnerabilities
2018-12-16 00:29:48
suse
suse
Security update for MozillaThunderbird (important)
2019-02-14 00:00:00
Security update for MozillaThunderbird (important)
2019-02-27 00:00:00
Security update for MozillaThunderbird (important)
2019-02-26 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2019-01-24 00:00:00
Firefox vulnerabilities
2018-12-11 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2018-12-11 00:00:00
archlinux
archlinux
[ASA-201812-9] firefox: multiple issues
2018-12-12 00:00:00
[ASA-201810-12] chromium: multiple issues
2018-10-17 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2019-03-10 00:00:00
Chromium: Multiple vulnerabilities
2018-11-23 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-16 03:23:44
Insecure Same-Origin Policy
2019-05-16 03:23:45
Arbitrary Code Execution
2019-05-16 03:23:45
prion
prion
Design/Logic Flaw
2019-02-28 18:29:00
Buffer overflow
2019-02-28 18:29:00
Design/Logic Flaw
2018-11-14 15:29:00
attackerkb
attackerkb
CVE-2018-18492: Mozilla Firefox Select Element Use-After-Free
2019-02-28 00:00:00
cve
cve
CVE-2018-18498
2019-02-28 18:29:00
CVE-2018-18493
2019-02-28 18:29:00
CVE-2018-18494
2019-02-28 18:29:00
redhatcve
redhatcve
CVE-2018-18498
2020-04-03 01:57:03
CVE-2018-18494
2020-04-08 21:02:32
CVE-2018-18493
2020-04-03 19:58:12
debiancve
debiancve
CVE-2018-18498
2019-02-28 18:29:00
CVE-2018-18492
2019-02-28 18:29:00
CVE-2018-17466
2018-11-14 15:29:00
ubuntucve
ubuntucve
CVE-2018-18492
2018-12-11 00:00:00
CVE-2018-18494
2018-12-11 00:00:00
CVE-2018-18493
2018-12-11 00:00:00
myhack58
myhack58
Each rush of the weekend, all need to work together light getting tired of the twice cooked pork to enrich their inexplicable restlessness-vulnerability warning-the black bar safety net
2019-07-08 00:00:00
threatpost
threatpost
On Heels of Criticism, Newly-Released Google Chrome 70 Prioritizes Privacy
2018-10-17 14:04:48
chrome
chrome
Stable Channel Update for Desktop
2018-10-16 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: chromium-70.0.3538.77-4.fc29
2018-11-23 02:32:21
[SECURITY] Fedora 28 Update: chromium-70.0.3538.110-1.fc28
2018-11-30 02:14:11

0.019 Low

EPSS

Percentile

87.0%

JSON
Related for OPENSUSE-SU-2018:4112-1
nessus54altlinux2osv5oraclelinux4mozilla3openvas34redhat5debian4centos4ibm1kaspersky3slackware1amazon1mageia1suse6ubuntu2freebsd1archlinux2gentoo2veracode6prion6attackerkb1cve6redhatcve6debiancve6ubuntucve6myhack581threatpost1chrome1fedora2