Поиск уязвимостей

Уязвимость веб-браузеров Firefox ESR, Firefox, почтового клиента Thunderbird, связанная с сокрытием важной для безопасности информации, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

ALT-PU-2022-3436: package `thunderbird` update to version 102.6.1-alt1

ALT-PU-2022-3410: package `thunderbird` update to version 102.6.1-alt1

ALT-PU-2022-3407: package `thunderbird` update to version 102.6.0-alt1

ALT-PU-2022-3401: package `firefox-esr` update to version 102.6.0-alt1

ALT-PU-2022-3354: package `thunderbird` update to version 102.6.0-alt1

ALT-PU-2022-3341: package `firefox-esr` update to version 102.6.0-alt1

ALT-PU-2023-1043: package `firefox` update to version 108.0.1-alt0.p10.1

ALT-PU-2022-3356: package `firefox` update to version 108.0-alt1

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.<br/>*Note*: This issue was originally included in the advisories for Thunderbird 102.6, but a patch (specific to Thunderbird) was omitted, resulting in it actually being fixed in Thunderbird 102.6.1. This vulnerability affects Firefox < 108, Thunderbird < 102.6.1, Thunderbird < 102.6, and Firefox ESR < 102.6.

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.<br/>*Note*: This issue was originally included in the advisories for Thunderbird 102.6, but a patch (specific to Thunderbird) was omitted, resulting in it actually being fixed in Thunderbird 102.6.1. This vulnerability affects Firefox < 108, Thunderbird < 102.6.1, Thunderbird < 102.6, and Firefox ESR < 102.6.

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.<br/>*Note*: This issue was originally included in the advisories for Thunderbird 102.6, but a patch (specific to Thunderbird) was omitted, resulting in it actually being fixed in Thunderbird 102.6.1. This vulnerability affects Firefox < 108, Thunderbird < 102.6.1, Thunderbird < 102.6, and Firefox ESR < 102.6.

A file with a long filename could have had its filename truncated to r ...

Security update for MozillaThunderbird

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.<br/>*Note*: This issue was originally included in the advisories for Thunderbird 102.6, but a patch (specific to Thunderbird) was omitted, resulting in it actually being fixed in Thunderbird 102.6.1. This vulnerability affects Firefox < 108, Thunderbird < 102.6.1, Thunderbird < 102.6, and Firefox ESR < 102.6.

Important: firefox security update

ELSA-2022-9072-1: firefox security update (IMPORTANT)

ELSA-2022-9067-1: firefox security update (IMPORTANT)

ELSA-2022-9065-1: firefox security update (IMPORTANT)

Security update for MozillaThunderbird