CVE-2018-5095 · cross-distro fix matrix

CVE-2018-5095: An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6,

Affects 8 Linux releases across 11 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2018-5095 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

firefox-esr→ fixed in52.6.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:52.6.0-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```

Source: Debian Security Tracker

firefox-esr→ fixed in52.6.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:52.6.0-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```

Source: Debian Security Tracker

firefox-esr→ fixed in52.6.0esr-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y firefox-esr
```
thunderbird→ fixed in1:52.6.0-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y thunderbird
```