openSUSE-SU-2022:0058-1
openSUSE-SU-2022:0058-1 · Security update for MozillaThunderbird
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 91.4.1 - CVE-2021-4126: OpenPGP signature status doesn't consider additional message content. (bsc#1194215) - CVE-2021-44538: Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow. (bsc#1194020)
Fix available
- Published
- Updated
Stack: system · applications
Affected products and versions
zabbix SUSE:Package Hub 15 SP3
- Affected ranges
- ECOSYSTEM: < 4.0.38-bp153.2.3.1
Update to 4.0.38-bp153.2.3.1
zabbix openSUSE:Leap 15.3
- Affected ranges
- ECOSYSTEM: < 4.0.38-bp153.2.3.1
Update to 4.0.38-bp153.2.3.1
mozillathunderbird openSUSE:Leap 15.3
- Affected ranges
- ECOSYSTEM: < 91.4.1-8.48.1
Update to 91.4.1-8.48.1
Original sources
- https://lists.opensuse.org/archives/list/[email protected]/thread/ZTUQBSMWYBVSTVDYNNRW5EOI5CCOSTPZ/
- https://bugzilla.suse.com/1194020
- https://bugzilla.suse.com/1194215
- https://www.suse.com/security/cve/CVE-2021-4126
- https://www.suse.com/security/cve/CVE-2021-44538
- https://osv.dev/vulnerability/openSUSE-SU-2022:0058-1