This update for zabbix fixes the following issues:
- Updated to latest realease 4.0.37.
Security issues fixed:
- CVE-2022-23134: Fixed possible view of the setup pages by unauthenticated users if config file already exists (boo#1194681).
- CVE-2021-27927: Fixed CSRF protection mechanism inside CControllerAuthenticationUpdate controller (boo#1183014).
- CVE-2020-15803: Fixed stored XSS in the URL Widget (boo#1174253).
Bugfixes:
- boo#1181400: Added hardening to systemd service(s)
- boo#1144018: Restructured for easier maintenance because FATE#324346
This update for MozillaThunderbird fixes the following issues:
- Mozilla Thunderbird 91.4.1
- CVE-2021-4126: OpenPGP signature status doesn't consider additional message content. (bsc#1194215)
- CVE-2021-44538: Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow. (bsc#1194020)