ID de Prueba:	1.3.6.1.4.1.25623.1.0.884214
Categoría:	CentOS Local Security Checks
Título:	CentOS: Security Advisory for thunderbird (CESA-2022:1725)
Resumen:	The remote host is missing an update for the 'thunderbird'; package(s) announced via the CESA-2022:1725 advisory.
Descripción:	Summary: The remote host is missing an update for the 'thunderbird' package(s) announced via the CESA-2022:1725 advisory. Vulnerability Insight: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.9.0. Security Fix(es): * Mozilla: Bypassing permission prompt in nested browsing contexts (CVE-2022-29909) * Mozilla: iframe Sandbox bypass (CVE-2022-29911) * Mozilla: Fullscreen notification bypass using popups (CVE-2022-29914) * Mozilla: Leaking browser history with CSS variables (CVE-2022-29916) * Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9 (CVE-2022-29917) * Mozilla: Reader mode bypassed SameSite cookies (CVE-2022-29912) * Mozilla: Speech Synthesis feature not properly disabled (CVE-2022-29913) * Mozilla: Incorrect security status shown after viewing an attached email (CVE-2022-1520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: 'thunderbird' package(s) on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2022-1520 https://bugzilla.mozilla.org/show_bug.cgi?id=1745019 https://www.mozilla.org/security/advisories/mfsa2022-18/ Common Vulnerability Exposure (CVE) ID: CVE-2022-29909 https://bugzilla.mozilla.org/show_bug.cgi?id=1755081 https://www.mozilla.org/security/advisories/mfsa2022-16/ https://www.mozilla.org/security/advisories/mfsa2022-17/ Common Vulnerability Exposure (CVE) ID: CVE-2022-29911 https://bugzilla.mozilla.org/show_bug.cgi?id=1761981 Common Vulnerability Exposure (CVE) ID: CVE-2022-29912 https://bugzilla.mozilla.org/show_bug.cgi?id=1692655 Common Vulnerability Exposure (CVE) ID: CVE-2022-29913 https://bugzilla.mozilla.org/show_bug.cgi?id=1764778 Common Vulnerability Exposure (CVE) ID: CVE-2022-29914 https://bugzilla.mozilla.org/show_bug.cgi?id=1746448 Common Vulnerability Exposure (CVE) ID: CVE-2022-29916 https://bugzilla.mozilla.org/show_bug.cgi?id=1760674 Common Vulnerability Exposure (CVE) ID: CVE-2022-29917 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684739%2C1706441%2C1753298%2C1762614%2C1762620%2C1764778
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.