Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2023.0057
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2023-0057)
Zusammenfassung:	The remote host is missing an update for the 'thunderbird, thunderbird-l10n' package(s) announced via the MGASA-2023-0057 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'thunderbird, thunderbird-l10n' package(s) announced via the MGASA-2023-0057 advisory. Vulnerability Insight: User Interface lockup with messages combining S/MIME and OpenPGP. (CVE-2023-0616) Content security policy leak in violation reports using iframes. (CVE-2023-25728) Screen hijack via browser fullscreen mode. (CVE-2023-25730) Arbitrary memory write via PKCS 12 in NSS. (CVE-2023-0767) Potential use-after-free from compartment mismatch in SpiderMonkey. (CVE-2023-25735) Invalid downcast in SVGUtils::SetupStrokeGeometry. (CVE-2023-25737) Use-after-free in mozilla::dom::ScriptLoadContext::~ ScriptLoadContext. (CVE-2023-25739) Extensions could have opened external schemes without user knowledge. (CVE-2023-25729) Out of bounds memory write from EncodeInputStream. (CVE-2023-25732) Web Crypto ImportKey crashes tab. (CVE-2023-25742) Memory safety bugs fixed in Thunderbird 102.8. (CVE-2023-25746) Affected Software/OS: 'thunderbird, thunderbird-l10n' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2023-0616 https://bugzilla.mozilla.org/show_bug.cgi?id=1806507 https://www.mozilla.org/security/advisories/mfsa2023-07/ Common Vulnerability Exposure (CVE) ID: CVE-2023-0767 https://alas.aws.amazon.com/AL2/ALAS-2023-1992.html https://bugzilla.mozilla.org/show_bug.cgi?id=1804640 https://www.mozilla.org/security/advisories/mfsa2023-05/ https://www.mozilla.org/security/advisories/mfsa2023-06/ Common Vulnerability Exposure (CVE) ID: CVE-2023-25728 https://bugzilla.mozilla.org/show_bug.cgi?id=1790345 Common Vulnerability Exposure (CVE) ID: CVE-2023-25729 https://bugzilla.mozilla.org/show_bug.cgi?id=1792138 Common Vulnerability Exposure (CVE) ID: CVE-2023-25730 https://bugzilla.mozilla.org/show_bug.cgi?id=1794622 Common Vulnerability Exposure (CVE) ID: CVE-2023-25732 https://bugzilla.mozilla.org/show_bug.cgi?id=1804564 Common Vulnerability Exposure (CVE) ID: CVE-2023-25735 https://bugzilla.mozilla.org/show_bug.cgi?id=1810711 Common Vulnerability Exposure (CVE) ID: CVE-2023-25737 https://bugzilla.mozilla.org/show_bug.cgi?id=1811464 Common Vulnerability Exposure (CVE) ID: CVE-2023-25739 https://bugzilla.mozilla.org/show_bug.cgi?id=1811939 Common Vulnerability Exposure (CVE) ID: CVE-2023-25742 https://bugzilla.mozilla.org/show_bug.cgi?id=1813424 Common Vulnerability Exposure (CVE) ID: CVE-2023-25746 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1544127%2C1762368
Copyright	Copyright (C) 2023 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.