This security update for MozillaFirefox to version 60.1.0esr fixes multiple issues.

Security issues fixed (MFSA 2018-16, boo#1098998) :

  - CVE-2018-12359: Buffer overflow using computed size of     canvas element

  - CVE-2018-12360: Use-after-free when using focus()

  - CVE-2018-12361: Integer overflow in SwizzleData

  - CVE-2018-12362: Integer overflow in SSSE3 scaler

  - CVE-2018-5156: Media recorder segmentation fault when     track type is changed during capture

  - CVE-2018-12363: Use-after-free when appending DOM nodes

  - CVE-2018-12364: CSRF attacks through 307 redirects and     NPAPI plugins

  - CVE-2018-12365: Compromised IPC child process can list     local filenames

  - CVE-2018-12371: Integer overflow in Skia library during     edge builder allocation

  - CVE-2018-12366: Invalid data handling during QCMS     transformations

  - CVE-2018-12367: Timing attack mitigation of     PerformanceNavigationTiming

  - CVE-2018-12369: WebExtension security permission checks     bypassed by embedded experiments

  - CVE-2018-5187: Memory safety bugs fixed in Firefox 60     and Firefox ESR 60.1

  - CVE-2018-5188: Memory safety bugs fixed in Firefox 60,     Firefox ESR 60.1, and Firefox ESR 52.9

Other issues fixed :

  - various stability and regression fixes

  - do not disable system installed unsigned language packs     (bmo#1464766)

This update for seamonkey fixes the following issues :

Mozilla SeaMonkey was updated to 2.49.4 :

Now uses Gecko 52.9.1esr (boo#1098998).

Security issues fixed with MFSA 2018-16 (boo#1098998) :

  - CVE-2018-12359: Buffer overflow using computed size of     canvas element

  - CVE-2018-12360: Use-after-free when using focus()

  - CVE-2018-12362: Integer overflow in SSSE3 scaler

  - CVE-2018-5156: Media recorder segmentation fault when     track type is changed during capture

  - CVE-2018-12363: Use-after-free when appending DOM nodes

  - CVE-2018-12364: CSRF attacks through 307 redirects and     NPAPI plugins

  - CVE-2018-12365: Compromised IPC child process can list     local filenames

  - CVE-2018-12366: Invalid data handling during QCMS     transformations

  - CVE-2018-5188: Memory safety bugs fixed in Firefox 60,     Firefox ESR 60.1, and Firefox ESR 52.9

Localizations finally included again (boo#1062195)

Updated summary and description to more accurately reflect what SeaMonkey is, giving less prominence to the long- discontinued Mozilla Application Suite that many users may no longer be familiar with

Update to SeaMonkey 2.49.2

  - Gecko 52.6esr (including security relevant fixes)     (boo#1077291)

  - fix issue in Composer

  - With some themes, the menulist- and history-dropmarker     didn't show

  - Scrollbars didn't show the buttons

  - WebRTC has been disabled by default. It needs an add-on     to enable it per site

  - The active title bar was not visually emphasized

Correct requires and provides handling (boo#1076907)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-3325:05 advisory.

    * Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 (CVE-2018-5188)
    * Mozilla: Buffer overflow using computed size of canvas element (CVE-2018-12359)
    * Mozilla: Use-after-free using focus() (CVE-2018-12360)
    * Mozilla: Integer overflow in SSSE3 scaler (CVE-2018-12362)
    * Mozilla: Use-after-free when appending DOM nodes (CVE-2018-12363)
    * Mozilla: CSRF attacks through 307 redirects and NPAPI plugins (CVE-2018-12364)
    * thunderbird: S/MIME and PGP decryption oracles can be built with HTML emails (CVE-2018-12372)
    * thunderbird: S/MIME plaintext can be leaked through HTML reply/forward (CVE-2018-12373)
    * Mozilla: Compromised IPC child process can list local filenames (CVE-2018-12365)
    * Mozilla: Invalid data handling during QCMS transformations (CVE-2018-12366)
    * thunderbird: Using form to exfiltrate encrypted mail part by pressing enter in form field     (CVE-2018-12374)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Mozilla Firefox installed on the remote macOS or     Mac OS X host is prior to 61. It is, therefore, affected by multiple     critical and high severity vulnerabilities.

The version of Mozilla Firefox installed on the remote Windows     host is prior to 61. It is, therefore, affected by multiple critical     and high severity vulnerabilities.

The version of Thunderbird installed on the remote Windows host is prior to 60.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-19 advisory.

  - Mozilla developers and community members Alex Gaynor, Christoph Diehl, Christian Holler, Jason Kratzer,     David Major, Jon Coppeard, Nicolas B. Pierron, Jason Kratzer, Marcia Knous, and Ronald Crane reported     memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed     evidence of memory corruption and we presume that with enough effort that some of these could be exploited     to run arbitrary code. (CVE-2018-5188)

  - Windows 10 does not warn users before opening executable files with the <code>SettingContent-ms</code>     extension even when they have been downloaded from the internet and have the Mark of the Web. Without     the warning, unsuspecting users unfamiliar with this new file type might run an unwanted executable. This     also allows a WebExtension with the limited <code>downloads.open</code> permission to execute arbitrary     code without user interaction on Windows 10 systems  Note: this issue only affects Windows operating     systems. Other operating systems are unaffected. (CVE-2018-12368)

  - A buffer overflow can occur when rendering canvas content while adjusting the height and width of the     <code><canvas></code> element dynamically, causing data to be written outside of the currently     computed boundaries. This results in a potentially exploitable crash. (CVE-2018-12359)

  - A use-after-free vulnerability can occur when deleting an <code>input</code> element during a mutation     event handler triggered by focusing that element. This results in a potentially exploitable crash.
    (CVE-2018-12360)

  - An integer overflow can occur in the <code>SwizzleData</code> code while calculating buffer sizes. The     overflowed value is used for subsequent graphics computations when their inputs are not sanitized which     results in a potentially exploitable crash. (CVE-2018-12361)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 60.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-19 advisory.

  - Mozilla developers and community members Alex Gaynor, Christoph Diehl, Christian Holler, Jason Kratzer,     David Major, Jon Coppeard, Nicolas B. Pierron, Jason Kratzer, Marcia Knous, and Ronald Crane reported     memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed     evidence of memory corruption and we presume that with enough effort that some of these could be exploited     to run arbitrary code. (CVE-2018-5188)

  - Windows 10 does not warn users before opening executable files with the <code>SettingContent-ms</code>     extension even when they have been downloaded from the internet and have the Mark of the Web. Without     the warning, unsuspecting users unfamiliar with this new file type might run an unwanted executable. This     also allows a WebExtension with the limited <code>downloads.open</code> permission to execute arbitrary     code without user interaction on Windows 10 systems  Note: this issue only affects Windows operating     systems. Other operating systems are unaffected. (CVE-2018-12368)

  - A buffer overflow can occur when rendering canvas content while adjusting the height and width of the     <code><canvas></code> element dynamically, causing data to be written outside of the currently     computed boundaries. This results in a potentially exploitable crash. (CVE-2018-12359)

  - A use-after-free vulnerability can occur when deleting an <code>input</code> element during a mutation     event handler triggered by focusing that element. This results in a potentially exploitable crash.
    (CVE-2018-12360)

  - An integer overflow can occur in the <code>SwizzleData</code> code while calculating buffer sizes. The     overflowed value is used for subsequent graphics computations when their inputs are not sanitized which     results in a potentially exploitable crash. (CVE-2018-12361)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.9. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-2113 advisory.

    - Added fix for mozbz#1348168/CVE-2017-5428

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201810-01 (Mozilla Firefox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox. Please       review the referenced CVE identifiers for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page, possibly resulting in the execution of arbitrary code with the       privileges of the process or a Denial of Service condition. Furthermore,       a remote attacker may be able to perform Man-in-the-Middle attacks,       obtain sensitive information, spoof the address bar, conduct clickjacking       attacks, bypass security restrictions and protection mechanisms, or have       other unspecified impact.
  Workaround :

    There is no known workaround at this time.

An update for thunderbird is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 52.9.1.

Security Fix(es) :

* Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 (CVE-2018-5188)

* Mozilla: Buffer overflow using computed size of canvas element (CVE-2018-12359)

* Mozilla: Use-after-free using focus() (CVE-2018-12360)

* Mozilla: Integer overflow in SSSE3 scaler (CVE-2018-12362)

* Mozilla: Use-after-free when appending DOM nodes (CVE-2018-12363)

* Mozilla: CSRF attacks through 307 redirects and NPAPI plugins (CVE-2018-12364)

* thunderbird: S/MIME and PGP decryption oracles can be built with HTML emails (CVE-2018-12372)

* thunderbird: S/MIME plaintext can be leaked through HTML reply/forward (CVE-2018-12373)

* Mozilla: Compromised IPC child process can list local filenames (CVE-2018-12365)

* Mozilla: Invalid data handling during QCMS transformations (CVE-2018-12366)

* thunderbird: Using form to exfiltrate encrypted mail part by pressing enter in form field (CVE-2018-12374)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Alex Gaynor, Christoph Diehl, Christian Holler, Jason Kratzer, David Major, Jon Coppeard, Nicolas B. Pierron, Marcia Knous, Ronald Crane, Nils, F. Alonso (revskills), David Black, and OSS-Fuzz as the original reporters.

This update upgrades Thunderbird to version 52.9.1.

Security Fix(es) :

  - Mozilla: Memory safety bugs fixed in Firefox 61, Firefox     ESR 60.1, and Firefox ESR 52.9 (CVE-2018-5188)

  - Mozilla: Buffer overflow using computed size of canvas     element (CVE-2018-12359)

  - Mozilla: Use-after-free using focus() (CVE-2018-12360)

  - Mozilla: Integer overflow in SSSE3 scaler     (CVE-2018-12362)

  - Mozilla: Use-after-free when appending DOM nodes     (CVE-2018-12363)

  - Mozilla: CSRF attacks through 307 redirects and NPAPI     plugins (CVE-2018-12364)

  - thunderbird: S/MIME and PGP decryption oracles can be     built with HTML emails (CVE-2018-12372)

  - thunderbird: S/MIME plaintext can be leaked through HTML     reply/forward (CVE-2018-12373)

  - Mozilla: Compromised IPC child process can list local     filenames (CVE-2018-12365)

  - Mozilla: Invalid data handling during QCMS     transformations (CVE-2018-12366)

  - thunderbird: Using form to exfiltrate encrypted mail     part by pressing enter in form field (CVE-2018-12374)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-3259:05 advisory.

    * Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 (CVE-2018-5188)
    * Mozilla: Buffer overflow using computed size of canvas element (CVE-2018-12359)
    * Mozilla: Use-after-free using focus() (CVE-2018-12360)
    * Mozilla: Media recorder segmentation fault when track type is changed during capture (CVE-2018-5156)
    * Skia: Heap buffer overflow rasterizing paths in SVG (CVE-2018-6126)
    * Mozilla: Integer overflow in SSSE3 scaler (CVE-2018-12362)
    * Mozilla: Use-after-free when appending DOM nodes (CVE-2018-12363)
    * Mozilla: CSRF attacks through 307 redirects and NPAPI plugins (CVE-2018-12364)
    * Mozilla: address bar username and password spoofing in reader mode (CVE-2017-7762)
    * Mozilla: Compromised IPC child process can list local filenames (CVE-2018-12365)
    * Mozilla: Invalid data handling during QCMS transformations (CVE-2018-12366)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
123203	openSUSE Security Update : MozillaFirefox (openSUSE-2019-494)	Nessus	SuSE Local Security Checks	3/27/2019	6/11/2024	critical
123263	openSUSE Security Update : seamonkey (openSUSE-2019-602)	Nessus	SuSE Local Security Checks	3/27/2019	6/11/2024	critical
290021	MiracleLinux 4 : thunderbird-52.9.1-1.AXS4 (AXSA:2018-3325:05)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	critical
110806	Mozilla Firefox < 61 Multiple Critical Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	6/29/2018	3/3/2026	critical
110811	Mozilla Firefox < 61 Multiple Critical Vulnerabilities	Nessus	Windows	6/29/2018	9/10/2024	critical
111981	Mozilla Thunderbird < 60.0	Nessus	Windows	8/20/2018	11/18/2025	critical
275629	Mozilla Thunderbird < 60.0	Nessus	MacOS X Local Security Checks	11/18/2025	11/18/2025	critical
110807	Mozilla Firefox ESR < 52.9 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	6/29/2018	3/3/2026	critical
110917	Oracle Linux 7 : firefox (ELSA-2018-2113)	Nessus	Oracle Linux Local Security Checks	7/5/2018	10/22/2024	critical
117894	GLSA-201810-01 : Mozilla Firefox: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	10/3/2018	8/1/2024	critical
111341	CentOS 7 : thunderbird (CESA-2018:2252)	Nessus	CentOS Local Security Checks	7/26/2018	9/3/2024	critical
111344	Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20180725)	Nessus	Scientific Linux Local Security Checks	7/26/2018	9/2/2024	critical
111780	openSUSE Security Update : seamonkey (openSUSE-2018-867)	Nessus	SuSE Local Security Checks	8/16/2018	8/21/2024	critical
288963	MiracleLinux 7 : firefox-60.1.0-5.0.1.el7 (AXSA:2018-3259:05)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical