openSUSE-SU-2019:1606-1
Security update for MozillaThunderbird
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for MozillaThunderbird fixes the following issues: Security issues fixed: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote() (bsc#1137595). - CVE-2019-11704: Fixed a heap-based buffer overflow in parser_get_next_char() (bsc#1137595). - CVE-2019-11705: Fixed a stack-based buffer overflow in icalrecur_add_bydayrules() (bsc#1137595). - CVE-2019-11706: Fixed a type confusion in icaltimezone_get_vtimezone_properties() (bsc#1137595). - CVE-2019-11707: Fixed a type confusion in Array.pop (bsc#1138872). - CVE-2019-11708: Fixed a sandbox escape using Prompt:Open (bsc#1138872). This update was imported from the SUSE:SLE-15:Update update project.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.0 | MozillaThunderbird, MozillaThunderbird-buildsymbols, MozillaThunderbird-translations-common ve 1 tane daha | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.1 | MozillaThunderbird, MozillaThunderbird-buildsymbols, MozillaThunderbird-translations-common ve 1 tane daha | 60.7.2-lp151.2.7.1 |
2 kaynaktaki 8 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.0 | MozillaThunderbird | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.0 | MozillaThunderbird-buildsymbols | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.0 | MozillaThunderbird-translations-common | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.0 | MozillaThunderbird-translations-other | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.1 | MozillaThunderbird | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.1 | MozillaThunderbird-buildsymbols | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.1 | MozillaThunderbird-translations-common | 60.7.2-lp151.2.7.1 |
| openSUSE Leap 15.1 | MozillaThunderbird-translations-other | 60.7.2-lp151.2.7.1 |
Referanslar
- https://bugzilla.suse.com/1137595
- https://bugzilla.suse.com/1138872
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LLKQ5EZXADDPRD2AIRRG5BLXWO4VGDSF/#LLKQ5EZXADDPRD2AIRRG5BLXWO4VGDSF
- https://www.suse.com/security/cve/CVE-2019-11703/
- https://www.suse.com/security/cve/CVE-2019-11704/
- https://www.suse.com/security/cve/CVE-2019-11705/
- https://www.suse.com/security/cve/CVE-2019-11706/
- https://www.suse.com/security/cve/CVE-2019-11707/