| Errata ID | 566 |
|---|---|
| Date | 2018-12-19 |
| Source package | firefox-esr |
| Fixed in version | 60.4.0esr-1~deb8u1 |
| Description | This update addresses the following issues: * Memory safety bugs fixed (CVE-2018-12405) * Memory corruption in Angle (CVE-2018-17466) * Use-after-free with select element (CVE-2018-18492) * Buffer overflow in accelerated 2D canvas with Skia (CVE-2018-18493) * Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs (CVE-2018-18494) * Integer overflow when calculating buffer sizes for images (CVE-2018-18498) |
| Additional notes | |
| CVE ID | CVE-2018-12405 CVE-2018-17466 CVE-2018-18492 CVE-2018-18493 CVE-2018-18494 CVE-2018-18498 |
| UCS Bug number | #48366 |
