Oval Definition:oval:org.opensuse.security:def:759
Revision Date:2022-09-15Version:1
Title:Security update for MozillaThunderbird (Important)
Description:

This update for MozillaThunderbird fixes the following issues:

Updated to Mozilla Thunderbird 102.2.2: - CVE-2022-3033: Fixed leaking of sensitive information when composing a response to an HTML email with a META refresh tag (bsc#1203007). - CVE-2022-3032: Fixed missing blocking of remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute (bsc#1203007). - CVE-2022-3034: Fixed issue where iframe element in an HTML email could trigger a network request (bsc#1203007). - CVE-2022-36059: Fixed DoS in Matrix SDK bundled with Thunderbird service attack (bsc#1203007). - CVE-2022-38472: Fixed Address bar spoofing via XSLT error handling (bsc#1202645). - CVE-2022-38473: Fixed cross-origin XSLT Documents inheriting the parent's permissions (bsc#1202645). - CVE-2022-38476: Fixed data race and potential use-after-free in PK11_ChangePW (bsc#1202645). - CVE-2022-38477: Fixed memory safety bugs (bsc#1202645). - CVE-2022-38478: Fixed memory safety bugs (bsc#1202645).

- CVE-2022-36319: Fixed mouse position spoofing with CSS transforms (bsc#1201758). - CVE-2022-36318: Fixed directory indexes for bundled resources reflected URL parameters (bsc#1201758). - CVE-2022-36314: Fixed unexpected network loads when opening local .lnk files (bsc#1201758). - CVE-2022-2505: Fixed memory safety bugs (bsc#1201758).

- CVE-2022-34479: Fixed vulnerability which could overlay the address bar with web content (bsc#1200793). - CVE-2022-34470: Fixed use-after-free in nsSHistory (bsc#1200793). - CVE-2022-34468: Fixed CSP sandbox header without `allow-scripts` bypass via retargeted javascript (bsc#1200793). - CVE-2022-2226: Fixed emails with a mismatching OpenPGP signature date incorrectly accepted as valid (bsc#1200793). - CVE-2022-34481: Fixed integer overflow in ReplaceElementsAt (bsc#1200793). - CVE-2022-31744: Fixed CSP bypass enabling stylesheet injection (bsc#1200793). - CVE-2022-34472: Fixed unavailable PAC file resulting in OCSP requests being blocked (bsc#1200793). - CVE-2022-34478: Fixed Microsoft protocols attacks if a user accepts a prompt (bsc#1200793). - CVE-2022-2200: Fixed vulnerability where undesired attributes could be set as part of prototype pollution (bsc#1200793). - CVE-2022-34484: Fixed memory safety bugs (bsc#1200793).
Family:unixClass:patch
Status:Reference(s):1166028
1171962
1184994
1185972
1188063
1200793
1201758
1202645
1203007
CVE-2013-1985
CVE-2013-1985
CVE-2017-2579
CVE-2017-2580
CVE-2018-8975
CVE-2020-13529
CVE-2021-33910
CVE-2022-2200
CVE-2022-2226
CVE-2022-2505
CVE-2022-3032
CVE-2022-3033
CVE-2022-3034
CVE-2022-31744
CVE-2022-34468
CVE-2022-34470
CVE-2022-34472
CVE-2022-34478
CVE-2022-34479
CVE-2022-34481
CVE-2022-34484
CVE-2022-36059
CVE-2022-36314
CVE-2022-36318
CVE-2022-36319
CVE-2022-38472
CVE-2022-38473
CVE-2022-38476
CVE-2022-38477
CVE-2022-38478
SUSE-SU-2021:2809-1
SUSE-SU-2022:3281-1
Platform(s):openSUSE 13.2
openSUSE Leap 15.4
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 15 SP2
SUSE Linux Enterprise Desktop 15 SP3
SUSE Linux Enterprise for SAP 12
SUSE Linux Enterprise High Availability 15
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise Module for Basesystem 15
SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Basesystem 15 SP3
SUSE Linux Enterprise Module for Containers 15
SUSE Linux Enterprise Module for Desktop Applications 15
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
SUSE Linux Enterprise Module for Development Tools 15
SUSE Linux Enterprise Module for Legacy Software 15
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for Rasperry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Storage 7
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 15
SUSE Manager Proxy 4.1
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.1
SUSE Manager Server 4.2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.4 is installed
  • AND Package Information
  • MozillaThunderbird-102.2.2-150200.8.82.1 is installed
  • OR MozillaThunderbird-translations-common-102.2.2-150200.8.82.1 is installed
  • OR MozillaThunderbird-translations-other-102.2.2-150200.8.82.1 is installed
    • Definition Synopsis
  • SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed
  • AND haproxy-1.5.4-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • ImageMagick-6.8.8.1-5 is installed
  • OR libMagick++-6_Q16-3-6.8.8.1-5 is installed
  • OR libMagickCore-6_Q16-1-6.8.8.1-5 is installed
  • OR libMagickCore-6_Q16-1-32bit-6.8.8.1-5 is installed
  • OR libMagickWand-6_Q16-1-6.8.8.1-5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND python-requests-2.8.1-6.11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • libnetpbm11-10.80.1-3.8.2 is installed
  • OR netpbm-10.80.1-3.8.2 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND Package Information
  • libsystemd0-246.15-7.11.1 is installed
  • OR libsystemd0-32bit-246.15-7.11.1 is installed
  • OR libudev-devel-246.15-7.11.1 is installed
  • OR libudev1-246.15-7.11.1 is installed
  • OR libudev1-32bit-246.15-7.11.1 is installed
  • OR systemd-246.15-7.11.1 is installed
  • OR systemd-32bit-246.15-7.11.1 is installed
  • OR systemd-container-246.15-7.11.1 is installed
  • OR systemd-coredump-246.15-7.11.1 is installed
  • OR systemd-devel-246.15-7.11.1 is installed
  • OR systemd-doc-246.15-7.11.1 is installed
  • OR systemd-journal-remote-246.15-7.11.1 is installed
  • OR systemd-lang-246.15-7.11.1 is installed
  • OR systemd-sysvinit-246.15-7.11.1 is installed
  • OR udev-246.15-7.11.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 is installed
  • AND Package Information
  • cluster-md-kmp-default-4.12.14-25.6 is installed
  • OR dlm-kmp-default-4.12.14-25.6 is installed
  • OR gfs2-kmp-default-4.12.14-25.6 is installed
  • OR kernel-default-4.12.14-25.6 is installed
  • OR ocfs2-kmp-default-4.12.14-25.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 is installed
  • AND wget-1.19.5-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • libnetpbm11-10.80.1-3.8 is installed
  • OR netpbm-10.80.1-3.8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 15 is installed
  • AND Package Information
  • containerd-1.1.2-5.3 is installed
  • OR docker-18.06.1_ce-6.8 is installed
  • OR docker-bash-completion-18.06.1_ce-6.8 is installed
  • OR docker-libnetwork-0.7.0.1+gitr2664_3ac297bc7fd0-4.3 is installed
  • OR docker-runc-1.0.0rc5+gitr3562_69663f0bd4b6-6.3 is installed
  • OR golang-github-docker-libnetwork-0.7.0.1+gitr2664_3ac297bc7fd0-4.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 is installed
  • AND Package Information
  • cairo-1.15.10-4.5 is installed
  • OR libcairo2-32bit-1.15.10-4.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
  • AND libXinerama1-32bit-1.1.3-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 is installed
  • AND Package Information
  • rpm-4.14.1-10.3 is installed
  • OR rpm-build-4.14.1-10.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.171-3.3 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.171-3.3 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.171-3.3 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.171-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-default-4.12.14-25.6 is installed
  • OR kernel-default-livepatch-4.12.14-25.6 is installed
  • OR kernel-livepatch-4_12_14-25_6-default-1-1.3 is installed
  • OR kernel-livepatch-SLE15_Update_2-1-1.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
  • AND Package Information
  • curl-mini-7.60.0-3.14 is installed
  • OR libcurl-mini-devel-7.60.0-3.14 is installed
  • OR libcurl4-mini-7.60.0-3.14 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • openslp-2.0.0-6.3 is installed
  • OR openslp-server-2.0.0-6.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • apache2-mod_php7-7.2.5-4.9 is installed
  • OR php7-7.2.5-4.9 is installed
  • OR php7-bcmath-7.2.5-4.9 is installed
  • OR php7-bz2-7.2.5-4.9 is installed
  • OR php7-calendar-7.2.5-4.9 is installed
  • OR php7-ctype-7.2.5-4.9 is installed
  • OR php7-curl-7.2.5-4.9 is installed
  • OR php7-dba-7.2.5-4.9 is installed
  • OR php7-devel-7.2.5-4.9 is installed
  • OR php7-dom-7.2.5-4.9 is installed
  • OR php7-enchant-7.2.5-4.9 is installed
  • OR php7-exif-7.2.5-4.9 is installed
  • OR php7-fastcgi-7.2.5-4.9 is installed
  • OR php7-fileinfo-7.2.5-4.9 is installed
  • OR php7-fpm-7.2.5-4.9 is installed
  • OR php7-ftp-7.2.5-4.9 is installed
  • OR php7-gd-7.2.5-4.9 is installed
  • OR php7-gettext-7.2.5-4.9 is installed
  • OR php7-gmp-7.2.5-4.9 is installed
  • OR php7-iconv-7.2.5-4.9 is installed
  • OR php7-intl-7.2.5-4.9 is installed
  • OR php7-json-7.2.5-4.9 is installed
  • OR php7-ldap-7.2.5-4.9 is installed
  • OR php7-mbstring-7.2.5-4.9 is installed
  • OR php7-mysql-7.2.5-4.9 is installed
  • OR php7-odbc-7.2.5-4.9 is installed
  • OR php7-opcache-7.2.5-4.9 is installed
  • OR php7-openssl-7.2.5-4.9 is installed
  • OR php7-pcntl-7.2.5-4.9 is installed
  • OR php7-pdo-7.2.5-4.9 is installed
  • OR php7-pear-7.2.5-4.9 is installed
  • OR php7-pear-Archive_Tar-7.2.5-4.9 is installed
  • OR php7-pgsql-7.2.5-4.9 is installed
  • OR php7-phar-7.2.5-4.9 is installed
  • OR php7-posix-7.2.5-4.9 is installed
  • OR php7-shmop-7.2.5-4.9 is installed
  • OR php7-snmp-7.2.5-4.9 is installed
  • OR php7-soap-7.2.5-4.9 is installed
  • OR php7-sockets-7.2.5-4.9 is installed
  • OR php7-sqlite-7.2.5-4.9 is installed
  • OR php7-sysvmsg-7.2.5-4.9 is installed
  • OR php7-sysvsem-7.2.5-4.9 is installed
  • OR php7-sysvshm-7.2.5-4.9 is installed
  • OR php7-tokenizer-7.2.5-4.9 is installed
  • OR php7-wddx-7.2.5-4.9 is installed
  • OR php7-xmlreader-7.2.5-4.9 is installed
  • OR php7-xmlrpc-7.2.5-4.9 is installed
  • OR php7-xmlwriter-7.2.5-4.9 is installed
  • OR php7-xsl-7.2.5-4.9 is installed
  • OR php7-zip-7.2.5-4.9 is installed
  • OR php7-zlib-7.2.5-4.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • kernel-default-4.12.14-25.6 is installed
  • OR kernel-default-extra-4.12.14-25.6 is installed
    • BACK