MGASA-2020-0034 Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix security vulnerabilities: Bypass of @namespace CSS sanitization during pasting CVE-2019-17016 Type Confusion in XPCVariant.cpp CVE-2019-17017 CSS sanitization does not escape HTML tags CVE-2019-17022 Memory safety bugs fixed in Thunderbird 68.4.1 CVE-2019-17024...

Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix security vulnerabilities: Bypass of @namespace CSS sanitization during pasting CVE-2019-17016 Type Confusion in XPCVariant.cpp CVE-2019-17017 CSS sanitization does not escape HTML tags CVE-2019-17022 Memory safety bugs fixed in Thunderbird 68.4.1 CVE-2019-17024...

Security fix for the ALT Linux 10 package thunderbird version 68.4.1-alt1

Jan. 11, 2020 Andrey Cherepanov 68.4.1-alt1 - New version 68.4.1. - Fixed: + CVE-2019-17026 IonMonkey type confusion with StoreElementHole and FallibleStoreElement + CVE-2019-17015 Memory corruption in parent process during new content process initialization on Windows + CVE-2019-17016 Bypass of...

Fedora Update for thunderbird-enigmail FEDORA-2019-951d5dcaf9

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security fix for the ALT Linux 10 package thunderbird version 68.3.1-alt1

Dec. 23, 2019 Andrey Cherepanov 68.3.1-alt1 - New version 68.3.1. - Fixed: + CVE-2019-17008 Use-after-free in worker destruction + CVE-2019-13722 Stack corruption due to incorrect number of arguments in WebRTC code + CVE-2019-11745 Out of bounds write in NSS when encrypting with a block cipher +...

EulerOS Virtualization for ARM 64 3.0.3.0 : gnupg2 (EulerOS-SA-2019-2349)

According to the version of the gnupg2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery CSRF vulnerability in dirmngr that can result in Attack...

[SECURITY] [DSA 4571-2] enigmail update

------------------------------------------------------------------------- Debian Security Advisory DSA-4571-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 24, 2019 https://www.debian.org/security/faq -...

[SECURITY] Fedora 29 Update: thunderbird-enigmail-2.1.3-4.fc29

Enigmail is an extension to the mail client Mozilla Thunderbird which allows users to access the authentication and encryption features provided by GnuPG...

[SECURITY] Fedora 31 Update: thunderbird-enigmail-2.1.3-4.fc31

Enigmail is an extension to the mail client Mozilla Thunderbird which allows users to access the authentication and encryption features provided by GnuPG...

Fedora Update for thunderbird-enigmail FEDORA-2019-941d57ed72

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for thunderbird-enigmail FEDORA-2019-45a744b873

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: thunderbird-enigmail-2.1.3-4.fc30

Enigmail is an extension to the mail client Mozilla Thunderbird which allows users to access the authentication and encryption features provided by GnuPG...

SUSE-SU-2019:2982-1 Security update for enigmail

This update for enigmail fixes the following issues: - SeaMonkey is no longer supported. Update description and no longer put in SeaMonkey addons path bsc1151317 enigmail was updated 2.1.2: compatibility with Mozilla Thunderbird 68 New simplified setup wizard Full support for keys.openpgp.org...

Security fix for the ALT Linux 10 package thunderbird version 68.2.2-alt1

Nov. 9, 2019 Andrey Cherepanov 68.2.2-alt1 - New version 68.2.2. - Fixed: + CVE-2019-15903 Heap overflow in expat library in XMLGetCurrentLineNumber + CVE-2019-11757 Use-after-free when creating index updates in IndexedDB + CVE-2019-11758 Potentially exploitable crash due to 360 Total Security +...

Updated thunderbird packages fix security vulnerabilities

The updated packages fix security issues: Use-after-free when creating index updates in IndexedDB. CVE-2019-11757 Potentially exploitable crash due to 360 Total Security. CVE-2019-11758 Stack buffer overflow in HKDF output. CVE-2019-11759 Stack buffer overflow in WebRTC networking. CVE-2019-11760...

MGASA-2019-0316 Updated thunderbird packages fix security vulnerabilities

The updated packages fix security issues: Use-after-free when creating index updates in IndexedDB. CVE-2019-11757 Potentially exploitable crash due to 360 Total Security. CVE-2019-11758 Stack buffer overflow in HKDF output. CVE-2019-11759 Stack buffer overflow in WebRTC networking. CVE-2019-11760...

Updated thunderbird packages fix security vulnerabilities

This update provides an update to thunderbird 68.0, updates enigmail to 2.1.2 and fixes the following security issues: Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and Thunderbird 68. CVE-2019-11709 Memory safety bugs fixed in Firefox 68 and Thunderbird 68. CVE-2019-11710 Script...

Security fix for the ALT Linux 10 package thunderbird version 68.0-alt1

Aug. 29, 2019 Andrey Cherepanov 68.0-alt1 - New version 68.0. - Fixed: + CVE-2019-9811 Sandbox escape via installation of malicious language pack + CVE-2019-11711 Script injection within domain through inner window reuse + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI plugins b...

DEBIAN-CVE-2019-14664

In Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended...

CVE-2019-14664

In Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended...