PT-2022-33704 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: A data-race issue exists around netdev budget. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.64, update to...

PT-2022-33213 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.8 Description: The issue is related to a data-race condition for max midi devs access in the ALSA seq: oss component. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2022-33702 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: The issue concerns a data-race around sysctl fb tunnels only for init net. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-33305 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: A data-race issue exists around sysctl net busy poll. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.19.6, update ...

PT-2022-33370 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.3 through v5.19.3 Description: A potential security issue exists due to a data race condition. The issue was introduced in version v4.3 and is fixed in version v5.19.4. Recommendations: For Linux Kernel versions v4.3...

PT-2022-33304 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: A data-race issue exists around sysctl tstamp allow data. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.0 and is fixed in Linux...

openSUSE: Security Advisory for MozillaThunderbird (SUSE-SU-2022:3281-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2022-33301 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: A data-race issue exists around sysctl net busy read. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.11 and fixed in Linux Kernel version...

PT-2022-33239 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.8 Description: The issue is related to an annotated data-race around challenge timestamp. It was introduced in version v3.8 and fixed in version v5.19.8. The actual impact and attack plausibility have not...

PT-2022-33296 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.4 through v5.19.5 Description: A data-race issue exists around gro normal batch. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.4 through v5.19.5,...

thunderbird security update

CentOS Errata and Security Advisory CESA-2022:6169 An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS 7 : thunderbird (RHSA-2022:6169)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6169 advisory. - An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar...

CentOS 7 : firefox (RHSA-2022:6179)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6179 advisory. - An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar...

AlmaLinux 8 : thunderbird (ALSA-2022:6164)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:6164 advisory. - An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar...

GLSA-202208-38 : Mozilla Thunderbird: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-38 Mozilla Thunderbird: Multiple Vulnerabilities - An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar. This could have been...

Oracle Linux 7 : firefox (ELSA-2022-6179)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6179 advisory. 91.13.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs....

Oracle Linux 9 : thunderbird (ELSA-2022-6165)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6165 advisory. 91.13.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires...

RHEL 8 : firefox (RHSA-2022:6178)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6178 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

RHEL 8 : firefox (RHSA-2022:6175)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6175 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2022-38476

A data race could occur in the PK11ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR 102.2 and Thunderbird 102.2...