Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-3584

Критический

ALT-PU-2021-3584: package thunderbird update to version 91.4.1-alt1

Источник
errata.altlinux.org
Дата публикации
21.12.2021
Дата обновления
21.12.2021
Устраненные уязвимости
3

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades thunderbird to version 91.4.1-alt1.

Устраненные уязвимости3

Связанные уязвимости

suse-cvrf
почти 5 лет назад

Security update for MozillaThunderbird

suse-cvrf
почти 5 лет назад

Security update for MozillaThunderbird

CVSS3: 9.8
altlinux
почти 5 лет назад

ALT-PU-2021-3638: package `thunderbird` update to version 91.4.1-alt1

CVSS3: 6.5
ubuntu
почти 4 года назад

When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validity. This gave the false impression that the additional contents were also covered by the digital signature. Starting with Thunderbird version 91.4.1, only the signature that belongs to the top level MIME part will be considered for the displayed status. This vulnerability affects Thunderbird < 91.4.1.

CVSS3: 6.5
nvd
почти 4 года назад

When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validity. This gave the false impression that the additional contents were also covered by the digital signature. Starting with Thunderbird version 91.4.1, only the signature that belongs to the top level MIME part will be considered for the displayed status. This vulnerability affects Thunderbird < 91.4.1.