Advisories » MGASA-2018-0338

Updated iceaepe packages fix security vulnerability

Publication date: 15 Aug 2018
Modification date: 15 Aug 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-5089 , CVE-2018-5091 , CVE-2018-5095 , CVE-2018-5096 , CVE-2018-5097 , CVE-2018-5098 , CVE-2018-5099 , CVE-2018-5102 , CVE-2018-5103 , CVE-2018-5104 , CVE-2018-5117 , CVE-2018-5125 , CVE-2018-5127 , CVE-2018-5129 , CVE-2018-5130 , CVE-2018-5131 , CVE-2018-5144 , CVE-2018-5145 , CVE-2018-5148 , CVE-2018-5150 , CVE-2018-5154 , CVE-2018-5155 , CVE-2018-5157 , CVE-2018-5158 , CVE-2018-5159 , CVE-2018-5168 , CVE-2018-5178 , CVE-2018-5183 , CVE-2018-6126

Description

Updated iceape packages include security fixes from upstream Seamonkey
and Firefox:

Multiple flaws were found in the way Iceape 2.49.1 processes various types
of web content, where loading a web page containing malicious content could
cause Iceape to crash, execute arbitrary code, or disclose sensitive
information (CVE-2018-5089, CVE-2018-5091, CVE-2018-5095, CVE-2018-5096,
CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5102, CVE-2018-5103,
CVE-2018-5104, CVE-2018-5117, CVE-2018-5125, CVE-2018-5127, CVE-2018-5129,
CVE-2018-5130, CVE-2018-5131, CVE-2018-5144, CVE-2018-5145, CVE-2018-5148,
CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158,
CVE-2018-5159, CVE-2018-5168, CVE-2018-5178, CVE-2018-5183, CVE-2018-6126)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23100
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-10/
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-14/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5089
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5091
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5095
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5096
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5097
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5098
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5099
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5102
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5103
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5104
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5117
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5125
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5127
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5129
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5130
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5131
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5144
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5145
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5148
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5150
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5154
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5155
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5157
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5158
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5159
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5168
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5178
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5183
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6126

SRPMS

6/core

• iceape-2.49.3-1.mga6