Описание
ELSA-2014-0449: thunderbird security update (IMPORTANT)
[24.5.0-1.0.1]
- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js
[24.5.0-1]
- Update to 24.5.0
Обновленные пакеты
Oracle Linux 5
Oracle Linux x86_64
thunderbird
24.5.0-1.0.1.el5_10
Oracle Linux i386
thunderbird
24.5.0-1.0.1.el5_10
Oracle Linux 6
Oracle Linux x86_64
thunderbird
24.5.0-1.0.1.el6_5
Oracle Linux i686
thunderbird
24.5.0-1.0.1.el6_5
Ссылки на источники
Связанные уязвимости
ALT-PU-2014-1621: package `thunderbird` update to version 24.5.0-alt1
ALT-PU-2014-1678: package `seamonkey` update to version 2.26-alt1
ALT-PU-2014-1620: package `firefox` update to version 29.0.1-alt1
Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving an imgLoader object that is not properly handled during an image-resize operation.