ALT-BU-2019-3521-1
Branch c8 update bulletin.
Package firefox-esr updated to version 60.5.1-alt0.M80C.1 for branch c8 in task 221669.
Closed vulnerabilities
BDU:2018-01609
Уязвимость графической библиотеки Skia браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2019-00013
Уязвимость графической библиотеки Skia веб-браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2019-01571
Уязвимость библиотеки Skia используемой веб-браузеров Firefox, Firefox ESR и программы для работы с электронной почтой Thunderbird, связанная с целочисленным переполнением, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-18335
Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2019:1162
- openSUSE-SU-2019:1162
- 106084
- 106084
- RHSA-2018:3803
- RHSA-2018:3803
- https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
- https://crbug.com/895362
- https://crbug.com/895362
- GLSA-201904-07
- GLSA-201904-07
- GLSA-201908-18
- GLSA-201908-18
- DSA-4352
- DSA-4352
Modified: 2024-11-21
CVE-2018-18356
An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2019:1162
- openSUSE-SU-2019:1162
- 106084
- 106084
- RHSA-2018:3803
- RHSA-2018:3803
- RHSA-2019:0373
- RHSA-2019:0373
- RHSA-2019:0374
- RHSA-2019:0374
- RHSA-2019:1144
- RHSA-2019:1144
- https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
- https://crbug.com/883666
- https://crbug.com/883666
- [debian-lts-announce] 20190215 [SECURITY] [DLA 1677-1] firefox-esr security update
- [debian-lts-announce] 20190215 [SECURITY] [DLA 1677-1] firefox-esr security update
- [debian-lts-announce] 20190216 [SECURITY] [DLA 1678-1] thunderbird security update
- [debian-lts-announce] 20190216 [SECURITY] [DLA 1678-1] thunderbird security update
- GLSA-201903-04
- GLSA-201903-04
- GLSA-201904-07
- GLSA-201904-07
- GLSA-201908-18
- GLSA-201908-18
- USN-3896-1
- USN-3896-1
- USN-3897-1
- USN-3897-1
- DSA-4352
- DSA-4352
- DSA-4391
- DSA-4391
- DSA-4392
- DSA-4392
Modified: 2024-11-21
CVE-2019-5785
Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.