MGASA-2020-0034

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2020-0034.html

Import Source

https://advisories.mageia.org/MGASA-2020-0034.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2020-0034

Related

Published

2020-01-11T23:52:04Z

Modified

2020-01-11T23:32:37Z

Summary

Updated thunderbird packages fix security vulnerabilities

Details

Updated thunderbird packages fix security vulnerabilities:

Bypass of @namespace CSS sanitization during pasting (CVE-2019-17016)

Type Confusion in XPCVariant.cpp (CVE-2019-17017)

CSS sanitization does not escape HTML tags (CVE-2019-17022)

Memory safety bugs fixed in Thunderbird 68.4.1 (CVE-2019-17024)

IonMonkey type confusion with StoreElementHole and FallibleStoreElement (CVE-2019-17026)

Enigmail has been updated to 2.15

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

68.4.1-1.mga7

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

68.4.1-1.mga7

{
    "section": "core"
}