Test ID:	1.3.6.1.4.1.25623.1.1.10.2023.0147
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2023-0147)
Summary:	The remote host is missing an update for the 'thunderbird, thunderbird-l10n' package(s) announced via the MGASA-2023-0147 advisory.
Description:	Summary: The remote host is missing an update for the 'thunderbird, thunderbird-l10n' package(s) announced via the MGASA-2023-0147 advisory. Vulnerability Insight: Fullscreen notification obscured. (CVE-2023-29533) Double-free in libwebp. (CVE-2023-1999) Potential Memory Corruption following Garbage Collector compaction. (CVE-2023-29535) Invalid free from JavaScript code. (CVE-2023-29536) Revocation status of S/Mime recipient certificates was not checked. (CVE-2023-0547) Hang when processing certain OpenPGP messages. (CVE-2023-29479) Content-Disposition filename truncation leads to Reflected File Download. (CVE-2023-29539) Files with malicious extensions could have been downloaded unsafely on Linux. (CVE-2023-29541) Memory Corruption in Safe Browsing Code. (CVE-2023-1945) Incorrect optimization result on ARM64. (CVE-2023-29548) Memory safety bugs fixed in Thunderbird 102.10. (CVE-2023-29550) Affected Software/OS: 'thunderbird, thunderbird-l10n' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-0547 https://bugzilla.mozilla.org/show_bug.cgi?id=1811298 https://www.mozilla.org/security/advisories/mfsa2023-15/ Common Vulnerability Exposure (CVE) ID: CVE-2023-1945 https://bugzilla.mozilla.org/show_bug.cgi?id=1777588 https://www.mozilla.org/security/advisories/mfsa2023-14/ Common Vulnerability Exposure (CVE) ID: CVE-2023-1999 https://security.gentoo.org/glsa/202309-05 https://chromium.googlesource.com/webm/libwebp Common Vulnerability Exposure (CVE) ID: CVE-2023-29479 https://cve.ribose.com/advisories/ra-2023-04-11/ https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/ Common Vulnerability Exposure (CVE) ID: CVE-2023-29533 https://bugzilla.mozilla.org/show_bug.cgi?id=1798219 https://bugzilla.mozilla.org/show_bug.cgi?id=1814597 https://www.mozilla.org/security/advisories/mfsa2023-13/ Common Vulnerability Exposure (CVE) ID: CVE-2023-29535 https://bugzilla.mozilla.org/show_bug.cgi?id=1820543 Common Vulnerability Exposure (CVE) ID: CVE-2023-29536 https://bugzilla.mozilla.org/show_bug.cgi?id=1821959 Common Vulnerability Exposure (CVE) ID: CVE-2023-29539 https://bugzilla.mozilla.org/show_bug.cgi?id=1784348 Common Vulnerability Exposure (CVE) ID: CVE-2023-29541 https://bugzilla.mozilla.org/show_bug.cgi?id=1810191 Common Vulnerability Exposure (CVE) ID: CVE-2023-29548 https://bugzilla.mozilla.org/show_bug.cgi?id=1822754 Common Vulnerability Exposure (CVE) ID: CVE-2023-29550 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1720594%2C1812498%2C1814217%2C1818357%2C1751945%2C1818762%2C1819493%2C1820389%2C1820602%2C1821448%2C1822413%2C1824828
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.