Linux · Ubuntu · Package update · June 26, 2018

firefox 61.0+build3-0ubuntu0.18.04.1: firefox 61.0+build3-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

firefox 61.0+build3-0ubuntu0.18.04.1, released June 26, 2018, fixes 17 CVEs in firefox. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
17
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0465
91st percentile

Priority of the 17 CVEs

Patch now 0 Urgent 0 High 0 Routine 17

Fixed package versions

ProductReleaseFixed in
firefoxUbuntu 18.04.6 LTS (bionic)61.0+build3-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2018-12359 firefox: A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element...n/a 0.0465 None reported
Routine CVE-2018-5188 firefox: Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8n/a 0.0395 None reported
Routine CVE-2018-12362 xul-ext-gdata-provider: An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3)...n/a 0.0377 None reported
Routine CVE-2018-5156 firefox: A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occur...n/a 0.0376 None reported
Routine CVE-2018-12365 firefox: A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file syst...n/a 0.0316 None reported
Routine CVE-2018-12366 firefox: An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as...n/a 0.0316 None reported
Routine CVE-2018-12360 firefox: A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by...n/a 0.0311 None reported
Routine CVE-2018-12363 firefox: A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, result...n/a 0.0310 None reported
Routine CVE-2018-5187 firefox: Memory safety bugs present in Firefox 60 and Firefox ESR 60n/a 0.0298 None reported
Routine CVE-2018-12361 firefox: An integer overflow can occur in the SwizzleData code while calculating buffer sizesn/a 0.0282 None reported
Routine CVE-2018-12369 firefox: WebExtensions bundled with embedded experiments were not correctly checked for proper authorizationn/a 0.0252 None reported
Routine CVE-2018-5186 firefox: Memory safety bugs present in Firefox 60n/a 0.0220 None reported
Routine CVE-2018-12367 firefox: In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the...n/a 0.0199 None reported
Routine CVE-2018-12364 firefox: NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin...n/a 0.0182 None reported
Routine CVE-2018-12371 firefox: An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with a...n/a 0.0145 None reported
Routine CVE-2018-12358 firefox: Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a mal...n/a 0.0127 None reported
Routine CVE-2018-12370 firefox: In Reader View SameSite cookie protections are not checked on exitingn/a 0.0113 None reported
Showing 1 to 17 of 17 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.