advisories/23150.adv

type: security
subject: Updated firefox packages fix security vulnerability
CVE:
 - CVE-2018-6126
src:
  6:
   core:
     - firefox-52.8.1-1.mga6
     - firefox-l10n-52.8.1-1.mga6
description: |
  A heap buffer overflow can occur in the Skia library when rasterizing paths
  using a maliciously crafted SVG file with anti-aliasing turned off. This
  results in a potentially exploitable crash (CVE-2018-6126).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=23150
 - https://www.mozilla.org/en-US/security/advisories/mfsa2018-14/
 - https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
ID: MGASA-2018-0282
1	type: security
2	subject: Updated firefox packages fix security vulnerability
3	CVE:
4	- CVE-2018-6126
5	src:
6	6:
7	core:
8	- firefox-52.8.1-1.mga6
9	- firefox-l10n-52.8.1-1.mga6
10	description: \|
11	A heap buffer overflow can occur in the Skia library when rasterizing paths
12	using a maliciously crafted SVG file with anti-aliasing turned off. This
13	results in a potentially exploitable crash (CVE-2018-6126).
14	references:
15	- https://bugs.mageia.org/show_bug.cgi?id=23150
16	- https://www.mozilla.org/en-US/security/advisories/mfsa2018-14/
17	- https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
18	ID: MGASA-2018-0282