openSUSE-SU-2019:1583-1
Security update for MozillaThunderbird
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for MozillaThunderbird fixes the following security issues: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote() (bsc#1137595). - CVE-2019-11704: Fixed a heap-based buffer overflow in parser_get_next_char() (bsc#1137595). - CVE-2019-11705: Fixed a stack-based buffer overflow in icalrecur_add_bydayrules() (bsc#1137595). - CVE-2019-11706: Fixed a type confusion in icaltimezone_get_vtimezone_properties() (bsc#1137595). This update was imported from the SUSE:SLE-15:Update update project.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.0 | MozillaThunderbird, MozillaThunderbird-buildsymbols, MozillaThunderbird-translations-common et 1 autres | 60.7.0-lp151.2.4.1 |
| openSUSE Leap 15.1 | MozillaThunderbird, MozillaThunderbird-buildsymbols, MozillaThunderbird-translations-common et 1 autres | 60.7.0-lp151.2.4.1 |
Afficher les 8 entrées de 2 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.0 | MozillaThunderbird | 60.7.0-lp151.2.4.1 |
| openSUSE Leap 15.0 | MozillaThunderbird-buildsymbols | 60.7.0-lp151.2.4.1 |
| openSUSE Leap 15.0 | MozillaThunderbird-translations-common | 60.7.0-lp151.2.4.1 |
| openSUSE Leap 15.0 | MozillaThunderbird-translations-other | 60.7.0-lp151.2.4.1 |
| openSUSE Leap 15.1 | MozillaThunderbird | 60.7.0-lp151.2.4.1 |
| openSUSE Leap 15.1 | MozillaThunderbird-buildsymbols | 60.7.0-lp151.2.4.1 |
| openSUSE Leap 15.1 | MozillaThunderbird-translations-common | 60.7.0-lp151.2.4.1 |
| openSUSE Leap 15.1 | MozillaThunderbird-translations-other | 60.7.0-lp151.2.4.1 |
Références
- https://bugzilla.suse.com/1137595
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FZRVVKWNJN3X4BODFXF57K5CF6KN4CQH/#FZRVVKWNJN3X4BODFXF57K5CF6KN4CQH
- https://www.suse.com/security/cve/CVE-2019-11703/
- https://www.suse.com/security/cve/CVE-2019-11704/
- https://www.suse.com/security/cve/CVE-2019-11705/
- https://www.suse.com/security/cve/CVE-2019-11706/
- https://www.suse.com/support/security/rating/