SUSE-SU-2024:4326-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - CVE-2024-50336: Fixed insufficient MXC URI validation which could allow client-side path traversal bsc1234413 Other fixes: - Updated to Mozilla Thunderbird 128.5.2i bsc1234413: fixed: Large virtual folders could be very slow fixed:...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.5.1 ESR bsc1234326: - Fixed an issue that prevented some websites from loading when using SSL Inspection. bmo1933747 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2024:4324-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.5.1 ESR bsc1234326: - Fixed an issue that prevented some websites from loading when using SSL Inspection. bmo1933747...

[SECURITY] Fedora 40 Update: thunderbird-128.5.2-1.fc40

Mozilla Thunderbird is a standalone mail and newsgroup client...

OPENSUSE-SU-2024:14583-1 MozillaFirefox-133.0.3-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-133.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2024-41356 · Opensuse +1 · Mozilla Firefox

Name of the Vulnerable Software and Affected Versions: MozillaFirefox version 128.5.1 ESR Description: This issue prevents some websites from loading when using SSL Inspection. Recommendations: Update to Firefox Extended Support Release 128.5.1 ESR...

OPENSUSE-SU-2024:14584-1 MozillaThunderbird-128.5.2-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla: Subdomain takeover on a subdomain under firefox.com

The subdomain ████ was vulnerable to a subdomain takeover due to its CNAME record pointing to a Fastly-hosted service that was not registered with Fastly. This allowed the researcher to claim and take control of the subdomain...

[SECURITY] Fedora 41 Update: thunderbird-128.5.2-1.fc41

Mozilla Thunderbird is a standalone mail and newsgroup client...

Mozilla Thunderbird ESR Security Update (MFSA2024-69) - Windows

Mozilla Thunderbird ESR is prone to an insufficient validation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Thunderbird ESR Security Update (MFSA2024-69) - Mac OS X

Mozilla Thunderbird ESR is prone to an insufficient validation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Thunderbird < 115.18

The version of Thunderbird installed on the remote Windows host is prior to 115.18. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-70 advisory. - Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and DOM-based XS...

Mozilla Thunderbird < 115.18

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.18. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-70 advisory. - Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and...

firefox-esr-128.5.1-1.1 on GA media (moderate)

firefox-esr-128.5.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14572-1 Rating: moderate Cross-References: CVE-2006-6077 CVE-2007-0008 CVE-2007-0009 CVE-2007-0078 CVE-2007-0079 CVE-2007-0775 CVE-2007-0776 CVE-2007-0777 CVE-2007-0780 CVE-2007-0800 CVE-2007-0981 CVE-2007-0995 CVE-2007-0996...

Slackware: Security Advisory (SSA:2024-346-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2024:4086-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4086-1 advisory. Firefox Extended Support Release 128.5.0 ESR, fixed various security fixes and other quality...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2024:4074-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4074-1 advisory. Firefox Extended Support Release 128.5.0 ESR, fixed various security fixes and other quality improvements, MFSA 2024-64 bsc1233695:...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2024:4050-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4050-1 advisory. - Mozilla Thunderbird 128.4.3 fixed: Folder corruption could cause Thunderbird to freeze and...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaThunderbird (SUSE-SU-2024:4148-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4148-1 advisory. - Mozilla Thunderbird 128.5 fixed: IMAP could crash when reading cached messages fixed: Enabling...

The vulnerability of the SEC_ASN1DecodeItem_Util function in the Mozilla Firefox browser and Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the SECASN1DecodeItemUtil function in Mozilla Firefox and Thunderbird’s email client is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...