OPENSUSE-SU-2020:1383-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird was updated to 68.12 bsc1175686 - CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege - CVE-2020-15664: Attacker-induced prompt for extension...

SUSE-SU-2020:2552-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird was updated to 68.12 bsc1175686 - CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege - CVE-2020-15664: Attacker-induced prompt for extension...

DSA-4754-1 thunderbird - security update

Bulletin has no description...

OPENSUSE-SU-2020:1205-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Updated to Mozilla Thunderbird 68.11: Fixed various security issues MFSA-2020-35, bsc1174538. Fixed CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker bsc1174538. Fixed CVE-2020-6514: WebRTC data...

OPENSUSE-SU-2020:1179-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Updated to Mozilla Thunderbird 68.11: Fixed various security issues MFSA-2020-35, bsc1174538. Fixed CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker bsc1174538. Fixed CVE-2020-6514: WebRTC data...

SUSE-SU-2020:2179-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Updated to Mozilla Thunderbird 68.11: Fixed various security issues MFSA-2020-35, bsc1174538. Fixed CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker bsc1174538. Fixed CVE-2020-6514: WebRTC data...

DSA-4740-1 thunderbird - security update

Bulletin has no description...

OPENSUSE-SU-2020:0982-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 68.10.0 ESR fixes the following issues: - CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags on ARM64 bsc1173576. - CVE-2020-12418: Information disclosure due to manipulated URL object bsc1173576. - CVE-2020-12419:...

OPENSUSE-SU-2020:0967-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 68.10.0 ESR fixes the following issues: - CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags on ARM64 bsc1173576. - CVE-2020-12418: Information disclosure due to manipulated URL object bsc1173576. - CVE-2020-12419:...

SUSE-SU-2020:1900-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 68.10.0 ESR fixes the following issues: - CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags on ARM64 bsc1173576. - CVE-2020-12418: Information disclosure due to manipulated URL object bsc1173576. - CVE-2020-12419:...

OPENSUSE-SU-2020:0799-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 68.9.0 bsc1172402 - CVE-2020-12405: Fixed a use-after-free in SharedWorkerService. - CVE-2020-12406: Fixed a JavaScript Type confusion with NativeTypes. - CVE-2020-12410: Fixed multiple memory safety issues -...

OPENSUSE-SU-2020:0643-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Update to 68.8.0 ESR MFSA 2020-18 bsc1171186 CVE-2020-12397 bmo1617370 Sender Email Address Spoofing using encoded Unicode characters CVE-2020-12387 bmo1545345 Use-after-free during worker shutdown CVE-2020-6831 bmo1632241 Buffer...

OPENSUSE-SU-2020:0544-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor boo1168630 - CVE-2020-6820: Use-after-free when handling a ReadableStream boo1168630 - CVE-2020-6821: Uninitialized memory could be read when...

SUSE-SU-2020:1027-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor boo1168630 - CVE-2020-6820: Use-after-free when handling a ReadableStream boo1168630 - CVE-2020-6821: Uninitialized memory could be read when...

OPENSUSE-SU-2020:0520-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor boo1168630 - CVE-2020-6820: Use-after-free when handling a ReadableStream boo1168630 - CVE-2020-6821: Uninitialized memory could be read when...

OPENSUSE-SU-2020:0366-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: MozillaThunderbird was updated to 68.6.0 ESR MFSA 2020-10 bsc1166238 - CVE-2020-6805: Fixed a use-after-free when removing data about origins - CVE-2020-6806: Fixed improper protections against state confusion - CVE-2020-6807: Fixed a...

CentOS 7 : thunderbird (RHSA-2020:0576)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0576 advisory. - When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects...

SUSE-SU-2020:0385-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 68.5 bsc1162777 MFSA 2020-07 bsc1163368 CVE-2020-6793 bmo1608539 Out-of-bounds read when processing certain email messages CVE-2020-6794 bmo1606619 Setting a master password post-Thunderbird 52 does not delete...

OPENSUSE-SU-2020:0094-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 68.4.1 fixes the following issues: Security issues fixed: - CVE-2019-17026: IonMonkey type confusion with StoreElementHole and FallibleStoreElement - CVE-2019-17016: Bypass of @namespace CSS sanitization during pasting - CVE-2019-17017: Type Confusion...

CentOS 6 : thunderbird (RHSA-2020:0123)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0123 advisory. - When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injecti...