Linux · Ubuntu · Package update · June 11, 2018

firefox 57.0.1+build2-0ubuntu1: firefox 57.0.1+build2-0ubuntu1 for Ubuntu 18.04.6 LTS (bionic)

firefox 57.0.1+build2-0ubuntu1, released June 11, 2018, fixes 16 CVEs in firefox. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
16
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0720
94th percentile

Priority of the 16 CVEs

Patch now 0 Urgent 0 High 0 Routine 16

Fixed package versions

ProductReleaseFixed in
firefoxUbuntu 18.04.6 LTS (bionic)57.0.1+build2-0ubuntu1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2017-7828 xul-ext-calendar-timezones: A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been f...n/a 0.0720 None reported
Routine CVE-2017-7826 firefox: Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4n/a 0.0334 None reported
Routine CVE-2017-7843 firefox: When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerp...n/a 0.0289 None reported
Routine CVE-2017-7827 firefox: Memory safety bugs were reported in Firefox 56n/a 0.0273 None reported
Routine CVE-2017-7830 firefox: The Resource Timing API incorrectly revealed navigations in cross-origin iframesn/a 0.0240 None reported
Routine CVE-2017-7844 firefox: A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image...n/a 0.0172 None reported
Routine CVE-2017-7831 firefox: A vulnerability where the security wrapper does not deny access to someexposed properties using the deprecated "_expo...n/a 0.0156 None reported
Routine CVE-2017-7842 firefox: If a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests are made for "<li...n/a 0.0151 None reported
Routine CVE-2017-7834 firefox: A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing fo...n/a 0.0151 None reported
Routine CVE-2017-7835 firefox: Mixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not correctly applied for re...n/a 0.0149 None reported
Routine CVE-2017-7832 firefox: The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute...n/a 0.0148 None reported
Routine CVE-2017-7833 firefox: Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the n...n/a 0.0144 None reported
Routine CVE-2017-7837 firefox: SVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies for that pagen/a 0.0144 None reported
Routine CVE-2017-7838 firefox: Punycode format text will be displayed for entire qualified international domain names in some instances when a sub-d...n/a 0.0144 None reported
Routine CVE-2017-7839 firefox: Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to b...n/a 0.0112 None reported
Routine CVE-2017-7840 firefox: JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in save...n/a 0.0112 None reported
Showing 1 to 16 of 16 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.