openSUSE-SU-2019:1606-1
Security update for MozillaThunderbird
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for MozillaThunderbird fixes the following issues: Security issues fixed: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote() (bsc#1137595). - CVE-2019-11704: Fixed a heap-based buffer overflow in parser_get_next_char() (bsc#1137595). - CVE-2019-11705: Fixed a stack-based buffer overflow in icalrecur_add_bydayrules() (bsc#1137595). - CVE-2019-11706: Fixed a type confusion in icaltimezone_get_vtimezone_properties() (bsc#1137595). - CVE-2019-11707: Fixed a type confusion in Array.pop (bsc#1138872). - CVE-2019-11708: Fixed a sandbox escape using Prompt:Open (bsc#1138872). This update was imported from the SUSE:SLE-15:Update update project.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.0 | MozillaThunderbird, MozillaThunderbird-buildsymbols, MozillaThunderbird-translations-common und 1 weitere | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.1 | MozillaThunderbird, MozillaThunderbird-buildsymbols, MozillaThunderbird-translations-common und 1 weitere | 60.7.2-lp151.2.7.1 |
Alle 8 Einträge aus 2 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.0 | MozillaThunderbird | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.0 | MozillaThunderbird-buildsymbols | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.0 | MozillaThunderbird-translations-common | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.0 | MozillaThunderbird-translations-other | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.1 | MozillaThunderbird | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.1 | MozillaThunderbird-buildsymbols | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.1 | MozillaThunderbird-translations-common | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.1 | MozillaThunderbird-translations-other | 60.7.2-lp151.2.7.1 |
Referenzen
- https://bugzilla.suse.com/1137595
- https://bugzilla.suse.com/1138872
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LLKQ5EZXADDPRD2AIRRG5BLXWO4VGDSF/#LLKQ5EZXADDPRD2AIRRG5BLXWO4VGDSF
- https://www.suse.com/security/cve/CVE-2019-11703/
- https://www.suse.com/security/cve/CVE-2019-11704/
- https://www.suse.com/security/cve/CVE-2019-11705/
- https://www.suse.com/security/cve/CVE-2019-11706/
- https://www.suse.com/security/cve/CVE-2019-11707/