SUSE-SU-2022:4579-1
SUSE-SU-2022:4579-1 · Security update for MozillaThunderbird
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for MozillaThunderbird fixes the following issues: Update to version 102.6 (bsc#1206242): - CVE-2022-46880: Use-after-free in WebGL - CVE-2022-46872: Arbitrary file read from a compromised content process - CVE-2022-46881: Memory corruption in WebGL - CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions - CVE-2022-46875: Download Protections were bypassed by .atloc and .ftploc files on Mac OS - CVE-2022-46882: Use-after-free in WebGL - CVE-2022-46878: Memory safety bugs fixed in Thunderbird 102.6
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
mozillathunderbird SUSE:Linux Enterprise Module for Package Hub 15 SP4
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.8.96.1
Actualiza a 102.6.0-150200.8.96.1
mozillathunderbird SUSE:Linux Enterprise Workstation Extension 15 SP4
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.8.96.1
Actualiza a 102.6.0-150200.8.96.1
mozillathunderbird openSUSE:Leap 15.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.8.96.1
Actualiza a 102.6.0-150200.8.96.1
mozillathunderbird openSUSE:Leap 15.4
- Intervalos de versiones afectados
- ECOSYSTEM: < 102.6.0-150200.8.96.1
Actualiza a 102.6.0-150200.8.96.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2022/suse-su-20224579-1/
- https://bugzilla.suse.com/1206242
- https://www.suse.com/security/cve/CVE-2022-46872
- https://www.suse.com/security/cve/CVE-2022-46874
- https://www.suse.com/security/cve/CVE-2022-46875
- https://www.suse.com/security/cve/CVE-2022-46878
- https://www.suse.com/security/cve/CVE-2022-46880
- https://www.suse.com/security/cve/CVE-2022-46881
- https://www.suse.com/security/cve/CVE-2022-46882
- https://osv.dev/vulnerability/SUSE-SU-2022:4579-1