Most recent entries from all

ALSA-2021:5045 — Important: thunderbird security update

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.4.0.

Security Fix(es):

* Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4 (BZ#2030116)

* Mozilla: URL leakage when navigating while executing asynchronous function (CVE-2021-43536)

* Mozilla: Heap buffer overflow when using structured clone (CVE-2021-43537)

* Mozilla: Missing fullscreen and pointer lock notification when requesting both (CVE-2021-43538)

* Mozilla: GC rooting failure when calling wasm instance methods (CVE-2021-43539)

* Mozilla: External protocol handler parameters were unescaped (CVE-2021-43541)

* Mozilla: XMLHttpRequest error codes could have leaked the existence of an external protocol handler (CVE-2021-43542)

* Mozilla: Bypass of CSP sandbox directive when embedding (CVE-2021-43543)

* Mozilla: JavaScript unexpectedly enabled for the composition area (CVE-2021-43528)

* Mozilla: Denial of Service when using the Location API in a loop (CVE-2021-43545)

* Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed (CVE-2021-43546)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2022-02701

certfr-2021-avi-925 — De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Elles permettent à un attaquant de provoquer…

certfr-2021-avi-925

EUVD-2026-32538

fkie_cve-2021-43528

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird < 91.4.0.

GHSA-q4gq-74cq-85g9

gsd-2021-43528

openSUSE-SU-2021:1635-1 — Security update for MozillaThunderbird

Security update for MozillaThunderbird

RHSA-2021:5047 — Red Hat Security Advisory: thunderbird security update

Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4 Mozilla: JavaScript unexpectedly enabled for the composition area Mozilla: URL leakage when navigating while executing asynchronous function Mozilla: Heap buffer overflow when using structured clone Mozilla: Missing fullscreen and pointer lock notification when requesting both Mozilla: GC rooting failure when calling wasm instance methods Mozilla: External protocol handler parameters were unescaped Mozilla: XMLHttpRequest error codes could have leaked the existence of an external protocol handler Mozilla: Bypass of CSP sandbox directive when embedding Mozilla: Denial of Service when using the Location API in a loop Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed

SUSE-SU-2021:4150-1 — Security update for MozillaThunderbird

Security update for MozillaThunderbird

UBUNTU-CVE-2021-43528

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird

WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator…

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.