A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a potentially exploitable crash. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=883666 https://bugzilla.mozilla.org/show_bug.cgi?id=1525817 External References: https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html https://www.mozilla.org/en-US/security/advisories/mfsa2019-04/#CVE-2018-18356 https://www.mozilla.org/en-US/security/advisories/mfsa2019-05/#CVE-2018-18356 https://www.mozilla.org/en-US/security/advisories/mfsa2019-06/#CVE-2018-18356
Created chromium tracking bugs for this issue: Affects: epel-7 [bug 1656576] Affects: fedora-all [bug 1656575]
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Supplementary Via RHSA-2018:3803 https://access.redhat.com/errata/RHSA-2018:3803
Created firefox tracking bugs for this issue: Affects: fedora-all [bug 1676992] Created thunderbird tracking bugs for this issue: Affects: fedora-all [bug 1676993]
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Via RHSA-2019:0373 https://access.redhat.com/errata/RHSA-2019:0373
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2019:0374 https://access.redhat.com/errata/RHSA-2019:0374