Test Kennung:	1.3.6.1.4.1.25623.1.0.856378
Kategorie:	openSUSE Local Security Checks
Titel:	openSUSE Security Advisory (SUSE-SU-2024:1858-1)
Zusammenfassung:	The remote host is missing an update for the 'MozillaThunderbird' package(s) announced via the SUSE-SU-2024:1858-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'MozillaThunderbird' package(s) announced via the SUSE-SU-2024:1858-1 advisory. Vulnerability Insight: This update for MozillaThunderbird fixes the following issues: Update to version 115.11 (bsc#1224056): - CVE-2024-4367: Arbitrary JavaScript execution in PDF.js - CVE-2024-4767: IndexedDB files retained in private browsing mode - CVE-2024-4768: Potential permissions request bypass via clickjacking - CVE-2024-4769: Cross-origin responses could be distinguished between script and non-script content-types - CVE-2024-4770: Use-after-free could occur when printing to PDF - CVE-2024-4777: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 - fixed: Splitter arrow between task list and task description did not behave as expected - fixed: Calendar Event Attendees dialog had incorrectly sized rows Affected Software/OS: 'MozillaThunderbird' package(s) on openSUSE Leap 15.5, openSUSE Leap 15.6. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2024-4367 https://bugzilla.mozilla.org/show_bug.cgi?id=1893645 https://www.mozilla.org/security/advisories/mfsa2024-21/ https://www.mozilla.org/security/advisories/mfsa2024-22/ https://www.mozilla.org/security/advisories/mfsa2024-23/ https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html Common Vulnerability Exposure (CVE) ID: CVE-2024-4767 https://bugzilla.mozilla.org/show_bug.cgi?id=1878577 Common Vulnerability Exposure (CVE) ID: CVE-2024-4768 https://bugzilla.mozilla.org/show_bug.cgi?id=1886082 Common Vulnerability Exposure (CVE) ID: CVE-2024-4769 https://bugzilla.mozilla.org/show_bug.cgi?id=1886108 Common Vulnerability Exposure (CVE) ID: CVE-2024-4770 https://bugzilla.mozilla.org/show_bug.cgi?id=1893270 Common Vulnerability Exposure (CVE) ID: CVE-2024-4777 Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1878199%2C1893340
Copyright	Copyright (C) 2024 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.