Security update for MozillaThunderbird (important)

An update that fixes two vulnerabilities is now available.

Description:

This update for MozillaThunderbird fixes the following issues:

• Mozilla Thunderbird 91.12

  • changed: Support for Google Talk chat accounts removed
  • fixed: OpenPGP signatures were broken when “Primary Password” dialog
    remained open
  • fixed: Various security fixes

• Security fixes (MFSA 2022-31) (bsc#1201758):

  • CVE-2022-36319: Fixed mouse Position spoofing with CSS transforms
    (bmo#1737722)
  • CVE-2022-36318: Fixed directory indexes for bundled resources
    reflected URL parameters (bmo#1771774)

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.4:

  zypper in -t patch openSUSE-SLE-15.4-2022-2748=1

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2022-2748=1

• SUSE Linux Enterprise Workstation Extension 15-SP4:

  zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-2748=1

• SUSE Linux Enterprise Workstation Extension 15-SP3:

  zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-2748=1

• SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4:

  zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-2748=1

• SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3:

  zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-2748=1