Errata overview
Errata ID 330
Date 2018-04-18
Source package firefox-esr
Fixed in version 52.7.3esr-1~deb8u1
Description
This update addresses the following issues:
* CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
* CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
* CVE-2018-5129: Out-of-bounds write with malformed IPC messages
* CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption
* CVE-2018-5131: Fetch API improperly returns cached copies of
  no-store/no-cache resources
* CVE-2018-5144: Integer overflow during Unicode conversion
* CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7
* CVE-2018-5146: Vorbis audio processing out of bounds write
* CVE-2018-5147: Out of bounds memory write in libtremor
* CVE-2018-5148: Use-after-free in compositor potentially allows code
  execution
Additional notes
CVE ID CVE-2018-5127
CVE-2018-5129
CVE-2018-5130
CVE-2018-5131
CVE-2018-5144
CVE-2018-5125
CVE-2018-5145
CVE-2018-5146
CVE-2018-5147
CVE-2018-5148
UCS Bug number #46689