SUSE-SU-2019:1683-1
Security update for MozillaThunderbird
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for MozillaThunderbird fixes the following issues: Security issues fixed: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote() (bsc#1137595). - CVE-2019-11704: Fixed a heap-based buffer overflow in parser_get_next_char() (bsc#1137595). - CVE-2019-11705: Fixed a stack-based buffer overflow in icalrecur_add_bydayrules() (bsc#1137595). - CVE-2019-11706: Fixed a type confusion in icaltimezone_get_vtimezone_properties() (bsc#1137595). - CVE-2019-11707: Fixed a type confusion in Array.pop (bsc#1138872). - CVE-2019-11708: Fixed a sandbox escape using Prompt:Open (bsc#1138872).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15 | MozillaThunderbird, MozillaThunderbird-translations-common, MozillaThunderbird-translations-other | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15.1 | MozillaThunderbird, MozillaThunderbird-translations-common, MozillaThunderbird-translations-other | 60.7.2-3.43.1 |
Mostrar las 6 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15 | MozillaThunderbird | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15 | MozillaThunderbird-translations-common | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15 | MozillaThunderbird-translations-other | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15.1 | MozillaThunderbird | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15.1 | MozillaThunderbird-translations-common | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15.1 | MozillaThunderbird-translations-other | 60.7.2-3.43.1 |
Referencias
- https://bugzilla.suse.com/1137595
- https://bugzilla.suse.com/1138872
- https://lists.suse.com/pipermail/sle-security-updates/2019-June/005623.html
- https://www.suse.com/security/cve/CVE-2019-11703/
- https://www.suse.com/security/cve/CVE-2019-11704/
- https://www.suse.com/security/cve/CVE-2019-11705/
- https://www.suse.com/security/cve/CVE-2019-11706/
- https://www.suse.com/security/cve/CVE-2019-11707/