Test Kennung:	1.3.6.1.4.1.25623.1.0.852107
Kategorie:	SuSE Local Security Checks
Titel:	openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2018:3646-1)
Zusammenfassung:	The remote host is missing an update for the 'MozillaThunderbird'; package(s) announced via the openSUSE-SU-2018:3646-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'MozillaThunderbird' package(s) announced via the openSUSE-SU-2018:3646-1 advisory. Vulnerability Insight: This update for MozillaThunderbird fixes the following issues: Thunderbird 63 ESR was updated to version 60.3.0 to fix the following issues (bsc#1112852): Security issues fixed (MFSA 2018-28): - CVE-2018-12389: Fixed memory safety bugs. - CVE-2018-12390: Fixed memory safety bugs. - CVE-2018-12391: Fixed HTTP Live Stream audio data is accessible cross-origin. - CVE-2018-12392: Fixed crash with nested event loops. - CVE-2018-12393: Fixed integer overflow during Unicode conversion while loading JavaScript. Non-security issues fixed: - various theme fixes - Shift+PageUp/PageDown in Write window - Gloda attachment filtering - Mailing list address auto-complete enter/return handling - Thunderbird hung if HTML signature references non-existent image - Filters not working for headers that appear more than once Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or 'zypper patch'. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1340=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1340=1 Affected Software/OS: MozillaThunderbird on openSUSE Leap 42.3, openSUSE Leap 15.0. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-12389 Common Vulnerability Exposure (CVE) ID: CVE-2018-12390 Common Vulnerability Exposure (CVE) ID: CVE-2018-12391 Common Vulnerability Exposure (CVE) ID: CVE-2018-12392 Common Vulnerability Exposure (CVE) ID: CVE-2018-12393
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.