CVE-2018-18505 · cross-distro fix matrix

CVE-2018-18505: An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the

Affects 8 Linux releases across 11 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2018-18505 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

firefox-esr→ fixed in60.5.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:60.5.0-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```

Source: Debian Security Tracker

firefox-esr→ fixed in60.5.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:60.5.0-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```

Source: Debian Security Tracker

firefox-esr→ fixed in60.5.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:60.5.0-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```