1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2018:0907-1

[SUSE-SU-2018:0907-1] Security update for MozillaFirefox

Severity Moderate
Affected Packages 16
CVEs 10
Info Packages References Vulnerabilities

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130):

  • CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  • CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
  • CVE-2018-5129: Out-of-bounds write with malformed IPC messages
  • CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption
  • CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources
  • CVE-2018-5144: Integer overflow during Unicode conversion
  • CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7
  • CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671)
  • CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671)
  • CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059)
Package Affected Version
pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-11&sp=4 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-11&sp=3 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-11&sp=4 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-11&sp=3 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox?arch=ppc64&distro=sles-11&sp=4 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox?arch=ia64&distro=sles-11&sp=4 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox?arch=i586&distro=sles-11&sp=4 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox?arch=i586&distro=sles-11&sp=3 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox-translations?arch=x86_64&distro=sles-11&sp=4 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox-translations?arch=x86_64&distro=sles-11&sp=3 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox-translations?arch=s390x&distro=sles-11&sp=4 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox-translations?arch=s390x&distro=sles-11&sp=3 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox-translations?arch=ppc64&distro=sles-11&sp=4 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox-translations?arch=ia64&distro=sles-11&sp=4 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox-translations?arch=i586&distro=sles-11&sp=4 < 52.7.3esr-72.27.2
pkg:rpm/suse/MozillaFirefox-translations?arch=i586&distro=sles-11&sp=3 < 52.7.3esr-72.27.2
ID
SUSE-SU-2018:0907-1
Severity
moderate
URL
https://www.suse.com/support/update/announcement/2018/suse-su-20180907-1/
Published
2018-04-10T08:27:08
(6 years ago)
Modified
2018-04-10T08:27:08
(6 years ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-11&sp=4 suse MozillaFirefox < 52.7.3esr-72.27.2 sles-11 x86_64
Affected pkg:rpm/suse/MozillaFirefox?arch=x86_64&distro=sles-11&sp=3 suse MozillaFirefox < 52.7.3esr-72.27.2 sles-11 x86_64
Affected pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-11&sp=4 suse MozillaFirefox < 52.7.3esr-72.27.2 sles-11 s390x
Affected pkg:rpm/suse/MozillaFirefox?arch=s390x&distro=sles-11&sp=3 suse MozillaFirefox < 52.7.3esr-72.27.2 sles-11 s390x
Affected pkg:rpm/suse/MozillaFirefox?arch=ppc64&distro=sles-11&sp=4 suse MozillaFirefox < 52.7.3esr-72.27.2 sles-11 ppc64
Affected pkg:rpm/suse/MozillaFirefox?arch=ia64&distro=sles-11&sp=4 suse MozillaFirefox < 52.7.3esr-72.27.2 sles-11 ia64
Affected pkg:rpm/suse/MozillaFirefox?arch=i586&distro=sles-11&sp=4 suse MozillaFirefox < 52.7.3esr-72.27.2 sles-11 i586
Affected pkg:rpm/suse/MozillaFirefox?arch=i586&distro=sles-11&sp=3 suse MozillaFirefox < 52.7.3esr-72.27.2 sles-11 i586
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=x86_64&distro=sles-11&sp=4 suse MozillaFirefox-translations < 52.7.3esr-72.27.2 sles-11 x86_64
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=x86_64&distro=sles-11&sp=3 suse MozillaFirefox-translations < 52.7.3esr-72.27.2 sles-11 x86_64
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=s390x&distro=sles-11&sp=4 suse MozillaFirefox-translations < 52.7.3esr-72.27.2 sles-11 s390x
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=s390x&distro=sles-11&sp=3 suse MozillaFirefox-translations < 52.7.3esr-72.27.2 sles-11 s390x
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=ppc64&distro=sles-11&sp=4 suse MozillaFirefox-translations < 52.7.3esr-72.27.2 sles-11 ppc64
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=ia64&distro=sles-11&sp=4 suse MozillaFirefox-translations < 52.7.3esr-72.27.2 sles-11 ia64
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=i586&distro=sles-11&sp=4 suse MozillaFirefox-translations < 52.7.3esr-72.27.2 sles-11 i586
Affected pkg:rpm/suse/MozillaFirefox-translations?arch=i586&distro=sles-11&sp=3 suse MozillaFirefox-translations < 52.7.3esr-72.27.2 sles-11 i586
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date