SUSE-SU-2019:1683-1
Security update for MozillaThunderbird
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for MozillaThunderbird fixes the following issues: Security issues fixed: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote() (bsc#1137595). - CVE-2019-11704: Fixed a heap-based buffer overflow in parser_get_next_char() (bsc#1137595). - CVE-2019-11705: Fixed a stack-based buffer overflow in icalrecur_add_bydayrules() (bsc#1137595). - CVE-2019-11706: Fixed a type confusion in icaltimezone_get_vtimezone_properties() (bsc#1137595). - CVE-2019-11707: Fixed a type confusion in Array.pop (bsc#1138872). - CVE-2019-11708: Fixed a sandbox escape using Prompt:Open (bsc#1138872).
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15 | MozillaThunderbird, MozillaThunderbird-translations-common, MozillaThunderbird-translations-other | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15.1 | MozillaThunderbird, MozillaThunderbird-translations-common, MozillaThunderbird-translations-other | 60.7.2-3.43.1 |
Afficher les 6 entrées de 2 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15 | MozillaThunderbird | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15 | MozillaThunderbird-translations-common | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15 | MozillaThunderbird-translations-other | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15.1 | MozillaThunderbird | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15.1 | MozillaThunderbird-translations-common | 60.7.2-3.43.1 |
| SUSE Linux Enterprise 15.1 | MozillaThunderbird-translations-other | 60.7.2-3.43.1 |
Références
- https://bugzilla.suse.com/1137595
- https://bugzilla.suse.com/1138872
- https://lists.suse.com/pipermail/sle-security-updates/2019-June/005623.html
- https://www.suse.com/security/cve/CVE-2019-11703/
- https://www.suse.com/security/cve/CVE-2019-11704/
- https://www.suse.com/security/cve/CVE-2019-11705/
- https://www.suse.com/security/cve/CVE-2019-11706/
- https://www.suse.com/security/cve/CVE-2019-11707/