Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2022:0906-1

Опубликовано: 21 мар. 2022
Источник: suse-cvrf

Описание

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Updated to version 91.7 (bsc#1196900):

  • CVE-2022-26381: Fixed an invalid memory access due to text reflow when SVG objects were present.
  • CVE-2022-26383: Fixed an issue where, when resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification.
  • CVE-2022-26384: Fixed an iframe XSS sandbox bypass when allow-popups was used on the iframe.
  • CVE-2022-26386: Fixed an issue where downloadable temporary files were accessible to other local users.
  • CVE-2022-26387: Fixed a potential add-on signature verification bypass due to a race condition.

Список пакетов

openSUSE Leap 15.3
MozillaThunderbird-91.7.0-150200.8.62.7
MozillaThunderbird-translations-common-91.7.0-150200.8.62.7
MozillaThunderbird-translations-other-91.7.0-150200.8.62.7

Ссылки

Описание

An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7.

Затронутые продукты
openSUSE Leap 15.3:MozillaThunderbird-91.7.0-150200.8.62.7
openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.7.0-150200.8.62.7
openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.7.0-150200.8.62.7
Ссылки

Описание

When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7.

Затронутые продукты
openSUSE Leap 15.3:MozillaThunderbird-91.7.0-150200.8.62.7
openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.7.0-150200.8.62.7
openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.7.0-150200.8.62.7
Ссылки

Описание

If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scripts</code>, they were able to craft a link that, when clicked, would lead to JavaScript execution in violation of the sandbox. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7.

Затронутые продукты
openSUSE Leap 15.3:MozillaThunderbird-91.7.0-150200.8.62.7
openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.7.0-150200.8.62.7
openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.7.0-150200.8.62.7
Ссылки

Описание

Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>, but this behavior was changed to download them to <code>/tmp</code> where they could be affected by other local users. This behavior was reverted to the original, user-specific directory. <br>*This bug only affects Firefox for macOS and Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 91.7 and Thunderbird < 91.7.

Затронутые продукты
openSUSE Leap 15.3:MozillaThunderbird-91.7.0-150200.8.62.7
openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.7.0-150200.8.62.7
openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.7.0-150200.8.62.7
Ссылки

Описание

When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox would not have noticed. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7.

Затронутые продукты
openSUSE Leap 15.3:MozillaThunderbird-91.7.0-150200.8.62.7
openSUSE Leap 15.3:MozillaThunderbird-translations-common-91.7.0-150200.8.62.7
openSUSE Leap 15.3:MozillaThunderbird-translations-other-91.7.0-150200.8.62.7
Ссылки
Уязвимость openSUSE-SU-2022:0906-1