Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/0E79426448436FC26DB84D27984A07C7
HistoryMar 10, 2023 - 12:00 a.m.

Security fix for the ALT Linux 10 package thunderbird version 102.8.0-alt1

2023-03-1000:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
7

102.8.0-alt1 built March 10, 2023 Pavel Vasenkov in task #316084

Feb. 28, 2023 Pavel Vasenkov

- New version.
- Security fixes:
  + CVE-2023-0616 User Interface lockup with messages combining S/MIME and OpenPGP
  + CVE-2023-25728 Content security policy leak in violation reports using iframes
  + CVE-2023-25730 Screen hijack via browser fullscreen mode
  + CVE-2023-0767 Arbitrary memory write via PKCS 12 in NSS
  + CVE-2023-25735 Potential use-after-free from compartment mismatch in SpiderMonkey
  + CVE-2023-25737 Invalid downcast in SVGUtils::SetupStrokeGeometry
  + CVE-2023-25738 Printing on Windows could potentially crash Thunderbird with some device drivers
  + CVE-2023-25739 Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  + CVE-2023-25729 Extensions could have opened external schemes without user knowledge
  + CVE-2023-25732 Out of bounds memory write from EncodeInputStream
  + CVE-2023-25734 Opening local .url files could cause unexpected network loads
  + CVE-2023-25742 Web Crypto ImportKey crashes tab
  + CVE-2023-25746 Memory safety bugs fixed in Thunderbird 102.8