CVE-2018-12379

• Buffer overflow using computed size of canvas element. (CVE-2018-12359)

• Use-after-free when using focus(). (CVE-2018-12360)

• Integer overflow in SwizzleData. (CVE-2018-12361)

• Integer overflow in SSSE3 scaler. (CVE-2018-12362)

• Media recorder segmentation fault when track type is changed during capture. (CVE-2018-5156)

• Use-after-free when appending DOM nodes. (CVE-2018-12363)

• CSRF attacks through 307 redirects and NPAPI plugins. (CVE-2018-12364)

• Compromised IPC child process can list local filenames. (CVE-2018-12365)

• Integer overflow in Skia library during edge builder allocation. (CVE-2018-12371)

• Invalid data handling during QCMS transformations. (CVE-2018-12366)

• Timing attack mitigation of PerformanceNavigationTiming. (CVE-2018-12367)

• No warning when opening executable SettingContent-ms files. (CVE-2018-12368)

• Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Thunderbird 60. (CVE-2018-5187)

• Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox ESR 52.9, and Thunderbird 60. (CVE-2018-5188)

• Use-after-free in refresh driver timers. (CVE-2018-12377)

• Use-after-free in IndexedDB. (CVE-2018-12378)

• Out-of-bounds write with malicious MAR file. (CVE-2018-12379)

• Proxy bypass using automount and autofs. (CVE-2017-16541)

• Crash in TransportSecurityInfo due to cached data. (CVE-2018-12385)

• Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords. (CVE-2018-12383)

• Memory safety bugs fixed in Firefox 62, Firefox ESR 60.2, and Thunderbird 60.2.1. (CVE-2018-12376)

• HTTP Live Stream audio data is accessible cross-origin. (CVE-2018-12391)

• Crash with nested event loops. (CVE-2018-12392)

• Integer overflow during Unicode conversion while loading JavaScript. (CVE-2018-12393)

• Memory safety bugs fixed in Firefox ESR 60.3 and Thunderbird 60.3. (CVE-2018-12389)

• Memory safety bugs fixed in Firefox 63, Firefox ESR 60.3, and Thunderbird 60.3. (CVE-2018-12390)

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

This update for MozillaFirefox to ESR 60.2 fixes several issues.

These general changes are part of the version 60 release.

• New browser engine with speed improvements
• Redesigned graphical user interface elements
• Unified address and search bar for new installations
• New tab page listing top visited, recently visited and recommended pages
• Support for configuration policies in enterprise deployments via JSON files
• Support for Web Authentication, allowing the use of USB tokens for authentication to web sites

The following changes affect compatibility:

• Now exclusively supports extensions built using the WebExtension API.
• Unsupported legacy extensions will no longer work in Firefox 60 ESR
• TLS certificates issued by Symantec before June 1st, 2016 are no longer trusted The 'security.pki.distrust_ca_policy' preference can be set to 0 to reinstate trust in those certificates

The following issues affect performance:

• new format for storing private keys, certificates and certificate trust If the user home or data directory is on a network file system, it is recommended that users set the following environment variable to avoid slowdowns: NSS_SDB_USE_CACHE=yes This setting is not recommended for local, fast file systems.

These security issues were fixed:

• CVE-2018-12381: Dragging and dropping Outlook email message results in page navigation (bsc#1107343).
• CVE-2017-16541: Proxy bypass using automount and autofs (bsc#1107343).
• CVE-2018-12376: Various memory safety bugs (bsc#1107343).
• CVE-2018-12377: Use-after-free in refresh driver timers (bsc#1107343).
• CVE-2018-12378: Use-after-free in IndexedDB (bsc#1107343).
• CVE-2018-12379: Out-of-bounds write with malicious MAR file (bsc#1107343).

This update for MozillaFirefox to ESR 60.2.2 fixes several issues.

These general changes are part of the version 60 release.

• New browser engine with speed improvements
• Redesigned graphical user interface elements
• Unified address and search bar for new installations
• New tab page listing top visited, recently visited and recommended pages
• Support for configuration policies in enterprise deployments via JSON files
• Support for Web Authentication, allowing the use of USB tokens for authentication to web sites

The following changes affect compatibility:

• Now exclusively supports extensions built using the WebExtension API.
• Unsupported legacy extensions will no longer work in Firefox 60 ESR
• TLS certificates issued by Symantec before June 1st, 2016 are no longer trusted The 'security.pki.distrust_ca_policy' preference can be set to 0 to reinstate trust in those certificates

The following issues affect performance:

• new format for storing private keys, certificates and certificate trust If the user home or data directory is on a network file system, it is recommended that users set the following environment variable to avoid slowdowns: NSS_SDB_USE_CACHE=yes This setting is not recommended for local, fast file systems.

These security issues were fixed:

• CVE-2018-12381: Dragging and dropping Outlook email message results in page navigation (bsc#1107343).
• CVE-2017-16541: Proxy bypass using automount and autofs (bsc#1107343).
• CVE-2018-12376: Various memory safety bugs (bsc#1107343).
• CVE-2018-12377: Use-after-free in refresh driver timers (bsc#1107343).
• CVE-2018-12378: Use-after-free in IndexedDB (bsc#1107343).
• CVE-2018-12379: Out-of-bounds write with malicious MAR file (bsc#1107343).
• CVE-2018-12386: Type confusion in JavaScript allowed remote code execution (bsc#1110506)
• CVE-2018-12387: Array.prototype.push stack pointer vulnerability may enable exploits in the sandboxed content process (bsc#1110507)
• CVE-2018-12385: Crash in TransportSecurityInfo due to cached data (bsc#1109363)
• CVE-2018-12383: Setting a master password did not delete unencrypted previously stored passwords (bsc#1107343)

This update for mozilla-nspr to version 4.19 fixes the follwing issues

• Added TCP Fast Open functionality
• A socket without PR_NSPR_IO_LAYER will no longer trigger an assertion when polling

This update for mozilla-nss to version 3.36.4 fixes the follwing issues

• Connecting to a server that was recently upgraded to TLS 1.3 would result in a SSL_RX_MALFORMED_SERVER_HELLO error.
• Fix a rare bug with PKCS#12 files.
• Replaces existing vectorized ChaCha20 code with verified HACL* implementation.
• TLS 1.3 support has been updated to draft -23.
• Added formally verified implementations of non-vectorized Chacha20 and non-vectorized Poly1305 64-bit.
• The following CA certificates were Removed: OU = Security Communication EV RootCA1 CN = CA Disig Root R1 CN = DST ACES CA X6 Certum CA, O=Unizeto Sp. z o.o. StartCom Certification Authority StartCom Certification Authority G2 TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3 ACEDICOM Root Certinomis - Autorité Racine TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı PSCProcert CA 沃通根证书, O=WoSign CA Limited Certification Authority of WoSign Certification Authority of WoSign G2 CA WoSign ECC Root Subject CN = VeriSign Class 3 Secure Server CA - G2 O = Japanese Government, OU = ApplicationCA CN = WellsSecure Public Root Certificate Authority CN = TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6 CN = Microsec e-Szigno Root

• The following CA certificates were Removed: AddTrust Public CA Root AddTrust Qualified CA Root China Internet Network Information Center EV Certificates Root CNNIC ROOT ComSign Secured CA GeoTrust Global CA 2 Secure Certificate Services Swisscom Root CA 1 Swisscom Root EV CA 2 Trusted Certificate Services …

This update for MozillaFirefox to ESR 60.2.2 fixes several issues.

These general changes are part of the version 60 release.

• New browser engine with speed improvements
• Redesigned graphical user interface elements
• Unified address and search bar for new installations
• New tab page listing top visited, recently visited and recommended pages
• Support for configuration policies in enterprise deployments via JSON files
• Support for Web Authentication, allowing the use of USB tokens for authentication to web sites

The following changes affect compatibility:

• Now exclusively supports extensions built using the WebExtension API.
• Unsupported legacy extensions will no longer work in Firefox 60 ESR
• TLS certificates issued by Symantec before June 1st, 2016 are no longer trusted The 'security.pki.distrust_ca_policy' preference can be set to 0 to reinstate trust in those certificates

The following issues affect performance:

• new format for storing private keys, certificates and certificate trust If the user home or data directory is on a network file system, it is recommended that users set the following environment variable to avoid slowdowns: NSS_SDB_USE_CACHE=yes This setting is not recommended for local, fast file systems.

These security issues were fixed:

• CVE-2018-12381: Dragging and dropping Outlook email message results in page navigation (bsc#1107343).
• CVE-2017-16541: Proxy bypass using automount and autofs (bsc#1107343).
• CVE-2018-12376: Various memory safety bugs (bsc#1107343).
• CVE-2018-12377: Use-after-free in refresh driver timers (bsc#1107343).
• CVE-2018-12378: Use-after-free in IndexedDB (bsc#1107343).
• CVE-2018-12379: Out-of-bounds write with malicious MAR file (bsc#1107343).
• CVE-2018-12386: Type confusion in JavaScript allowed remote code execution (bsc#1110506)
• CVE-2018-12387: Array.prototype.push stack pointer vulnerability may enable exploits in the sandboxed content process (bsc#1110507)
• CVE-2018-12385: Crash in TransportSecurityInfo due to cached data (bsc#1109363)
• CVE-2018-12383: Setting a master password did not delete unencrypted previously stored passwords (bsc#1107343)

This update for mozilla-nspr to version 4.19 fixes the follwing issues

• Added TCP Fast Open functionality
• A socket without PR_NSPR_IO_LAYER will no longer trigger an assertion when polling

This update for mozilla-nss to version 3.36.4 fixes the follwing issues

• Connecting to a server that was recently upgraded to TLS 1.3 would result in a SSL_RX_MALFORMED_SERVER_HELLO error.
• Fix a rare bug with PKCS#12 files.
• Replaces existing vectorized ChaCha20 code with verified HACL* implementation.
• TLS 1.3 support has been updated to draft -23.
• Added formally verified implementations of non-vectorized Chacha20 and non-vectorized Poly1305 64-bit.
• The following CA certificates were Removed: OU = Security Communication EV RootCA1 CN = CA Disig Root R1 CN = DST ACES CA X6 Certum CA, O=Unizeto Sp. z o.o. StartCom Certification Authority StartCom Certification Authority G2 TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3 ACEDICOM Root Certinomis - Autorité Racine TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı PSCProcert CA 沃通根证书, O=WoSign CA Limited Certification Authority of WoSign Certification Authority of WoSign G2 CA WoSign ECC Root Subject CN = VeriSign Class 3 Secure Server CA - G2 O = Japanese Government, OU = ApplicationCA CN = WellsSecure Public Root Certificate Authority CN = TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6 CN = Microsec e-Szigno Root

• The following CA certificates were Removed: AddTrust Public CA Root AddTrust Qualified CA Root China Internet Network Information Center EV Certificates Root CNNIC ROOT ComSign Secured CA GeoTrust Global CA 2 Secure Certificate Services Swisscom Root CA 1 Swisscom Root EV CA 2 Trusted Certificate Services …