Security update for Mozilla Thunderbird (important)

2017-12-2503:07:48

lists.opensuse.org

0.012 Low

EPSS

Percentile

85.2%

JSON

This update for Mozilla Thunderbird to version 52.5.2 fixes the following
vulnerabilities:

CVE-2017-7846: JavaScript Execution via RSS in mailbox:// origin
(bsc#1074043)
CVE-2017-7847: Local path string can be leaked from RSS feed
(bsc#1074044)
CVE-2017-7848: RSS Feed vulnerable to new line Injection (bsc#1074045)
CVE-2017-7829: From address with encoded null character is cut off in
message header display (bsc#1074046)

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.2i586mozillathunderbird-translations-other< 52.5.2-41.24.1MozillaThunderbird-translations-other-52.5.2-41.24.1.i586.rpm
openSUSE Leap42.2x86_64mozillathunderbird-debuginfo< 52.5.2-41.24.1MozillaThunderbird-debuginfo-52.5.2-41.24.1.x86_64.rpm
openSUSE Leap42.2x86_64mozillathunderbird< 52.5.2-41.24.1MozillaThunderbird-52.5.2-41.24.1.x86_64.rpm
openSUSE Leap42.2i586mozillathunderbird-translations-common< 52.5.2-41.24.1MozillaThunderbird-translations-common-52.5.2-41.24.1.i586.rpm
openSUSE Leap42.3i586mozillathunderbird-devel< 52.5.2-53.1MozillaThunderbird-devel-52.5.2-53.1.i586.rpm
openSUSE Leap42.3x86_64mozillathunderbird-debugsource< 52.5.2-53.1MozillaThunderbird-debugsource-52.5.2-53.1.x86_64.rpm
openSUSE Leap42.2i586mozillathunderbird-debugsource< 52.5.2-41.24.1MozillaThunderbird-debugsource-52.5.2-41.24.1.i586.rpm
openSUSE Leap42.3i586mozillathunderbird< 52.5.2-53.1MozillaThunderbird-52.5.2-53.1.i586.rpm
openSUSE Leap42.3x86_64mozillathunderbird-translations-common< 52.5.2-53.1MozillaThunderbird-translations-common-52.5.2-53.1.x86_64.rpm
openSUSE Leap42.3i586mozillathunderbird-translations-other< 52.5.2-53.1MozillaThunderbird-translations-other-52.5.2-53.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.2	i586	mozillathunderbird-translations-other	< 52.5.2-41.24.1	MozillaThunderbird-translations-other-52.5.2-41.24.1.i586.rpm
openSUSE Leap	42.2	x86_64	mozillathunderbird-debuginfo	< 52.5.2-41.24.1	MozillaThunderbird-debuginfo-52.5.2-41.24.1.x86_64.rpm
openSUSE Leap	42.2	x86_64	mozillathunderbird	< 52.5.2-41.24.1	MozillaThunderbird-52.5.2-41.24.1.x86_64.rpm
openSUSE Leap	42.2	i586	mozillathunderbird-translations-common	< 52.5.2-41.24.1	MozillaThunderbird-translations-common-52.5.2-41.24.1.i586.rpm
openSUSE Leap	42.3	i586	mozillathunderbird-devel	< 52.5.2-53.1	MozillaThunderbird-devel-52.5.2-53.1.i586.rpm
openSUSE Leap	42.3	x86_64	mozillathunderbird-debugsource	< 52.5.2-53.1	MozillaThunderbird-debugsource-52.5.2-53.1.x86_64.rpm
openSUSE Leap	42.2	i586	mozillathunderbird-debugsource	< 52.5.2-41.24.1	MozillaThunderbird-debugsource-52.5.2-41.24.1.i586.rpm
openSUSE Leap	42.3	i586	mozillathunderbird	< 52.5.2-53.1	MozillaThunderbird-52.5.2-53.1.i586.rpm
openSUSE Leap	42.3	x86_64	mozillathunderbird-translations-common	< 52.5.2-53.1	MozillaThunderbird-translations-common-52.5.2-53.1.x86_64.rpm
openSUSE Leap	42.3	i586	mozillathunderbird-translations-other	< 52.5.2-53.1	MozillaThunderbird-translations-other-52.5.2-53.1.i586.rpm