Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2019.0212
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2019-0212)
Zusammenfassung:	The remote host is missing an update for the 'thunderbird, thunderbird-l10n' package(s) announced via the MGASA-2019-0212 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'thunderbird, thunderbird-l10n' package(s) announced via the MGASA-2019-0212 advisory. Vulnerability Insight: Sandbox escape via installation of malicious language pack. (CVE-2019-9811) Script injection within domain through inner window reuse. (CVE-2019-11711) Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects. (CVE-2019-11712) Use-after-free with HTTP/2 cached stream. (CVE-2019-11713) Empty or malformed p256-ECDH public keys may trigger a segmentation fault. (CVE-2019-11729) HTML parsing error can contribute to content XSS. (CVE-2019-11715) Caret character improperly escaped in origins. (CVE-2019-11717) Out-of-bounds read when importing curve25519 private key. (CVE-2019-11719) Same-origin policy treats all files in a directory as having the same-origin. (CVE-2019-11730) Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8 and Thunderbird 60.8. (CVE-2019-11709) Enigmail 2.0.12 sets the default keyserver to keys.openpgp.org in order to mitigate the SKS Keyserver Network Attack. Affected Software/OS: 'thunderbird, thunderbird-l10n' package(s) on Mageia 6, Mageia 7. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11709 https://security.gentoo.org/glsa/201908-12 https://security.gentoo.org/glsa/201908-20 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1547266%2C1540759%2C1548822%2C1550498%2C1515052%2C1539219%2C1547757%2C1550498%2C1533522 https://www.mozilla.org/security/advisories/mfsa2019-21/ https://www.mozilla.org/security/advisories/mfsa2019-22/ https://www.mozilla.org/security/advisories/mfsa2019-23/ https://lists.debian.org/debian-lts-announce/2019/08/msg00001.html https://lists.debian.org/debian-lts-announce/2019/08/msg00002.html SuSE Security Announcement: openSUSE-SU-2019:1811 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html SuSE Security Announcement: openSUSE-SU-2019:1813 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html SuSE Security Announcement: openSUSE-SU-2019:1990 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html SuSE Security Announcement: openSUSE-SU-2019:2248 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html SuSE Security Announcement: openSUSE-SU-2019:2249 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html Common Vulnerability Exposure (CVE) ID: CVE-2019-11711 https://bugzilla.mozilla.org/show_bug.cgi?id=1552541 Common Vulnerability Exposure (CVE) ID: CVE-2019-11712 https://bugzilla.mozilla.org/show_bug.cgi?id=1543804 Common Vulnerability Exposure (CVE) ID: CVE-2019-11713 https://bugzilla.mozilla.org/show_bug.cgi?id=1528481 Common Vulnerability Exposure (CVE) ID: CVE-2019-11715 https://bugzilla.mozilla.org/show_bug.cgi?id=1555523 Common Vulnerability Exposure (CVE) ID: CVE-2019-11717 https://bugzilla.mozilla.org/show_bug.cgi?id=1548306 Common Vulnerability Exposure (CVE) ID: CVE-2019-11719 https://bugzilla.mozilla.org/show_bug.cgi?id=1540541 https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html RedHat Security Advisories: RHSA-2019:1951 https://access.redhat.com/errata/RHSA-2019:1951 Common Vulnerability Exposure (CVE) ID: CVE-2019-11729 https://bugzilla.mozilla.org/show_bug.cgi?id=1515342 RedHat Security Advisories: RHSA-2019:4190 https://access.redhat.com/errata/RHSA-2019:4190 Common Vulnerability Exposure (CVE) ID: CVE-2019-11730 https://bugzilla.mozilla.org/show_bug.cgi?id=1558299 Common Vulnerability Exposure (CVE) ID: CVE-2019-9811 https://bugzilla.mozilla.org/show_bug.cgi?id=1538007 https://bugzilla.mozilla.org/show_bug.cgi?id=1539598 https://bugzilla.mozilla.org/show_bug.cgi?id=1563327 SuSE Security Announcement: openSUSE-SU-2019:2251 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html SuSE Security Announcement: openSUSE-SU-2019:2260 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.