Lucene search

HistoryApr 03, 2019 - 12:00 a.m.

Security update for MozillaThunderbird (critical)


0.952 High




An update that fixes 13 vulnerabilities is now available.


This update for MozillaThunderbird fixes the following issues:

Security issues fixed:

  • Update to MozillaThunderbird 60.6.1 (bsc#1130262):

  • CVE-2019-9813: Fixed Ionmonkey type confusion with proto mutations

  • CVE-2019-9810: Fixed IonMonkey MArraySlice incorrect alias information

  • Update to MozillaThunderbird 60.6 (bsc#1129821):

  • CVE-2018-18506: Fixed an issue with Proxy Auto-Configuration file

  • CVE-2019-9801: Fixed an issue which could allow Windows programs to be
    exposed to web content

  • CVE-2019-9788: Fixed multiple memory safety bugs

  • CVE-2019-9790: Fixed a Use-after-free vulnerability when removing in-use
    DOM elements

  • CVE-2019-9791: Fixed an incorrect Type inference for constructors
    entered through on-stack replacement with IonMonkey

  • CVE-2019-9792: Fixed an issue where IonMonkey leaks JS_OPTIMIZED_OUT
    magic value to script

  • CVE-2019-9793: Fixed multiple improper bounds checks when Spectre
    mitigations are disabled

  • CVE-2019-9794: Fixed an issue where command line arguments not discarded
    during execution

  • CVE-2019-9795: Fixed a Type-confusion vulnerability in IonMonkey JIT

  • CVE-2019-9796: Fixed a Use-after-free vulnerability in SMIL animation

Release notes:

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • SUSE Package Hub for SUSE Linux Enterprise 12:

    zypper in -t patch openSUSE-2019-1126=1

SUSE Package Hub for SUSE Linux Enterprise12x86_64< - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64):- SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64):.x86_64.rpm