ALT-BU-2021-3977-2
Branch c9f2 update bulletin.
Package thunderbird updated to version 78.11.0-alt0.c9.1 for branch c9f2 in task 273567.
Closed vulnerabilities
BDU:2021-02858
Уязвимость браузера Mozilla Firefox, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код
BDU:2021-02898
Уязвимость почтового клиента Mozilla Thunderbird, связанная с чтением за границами буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальной информации
Modified: 2024-11-21
CVE-2021-29964
A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds read. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and Firefox ESR < 78.11.
- https://bugzilla.mozilla.org/show_bug.cgi?id=1706501
- https://bugzilla.mozilla.org/show_bug.cgi?id=1706501
- https://www.mozilla.org/security/advisories/mfsa2021-23/
- https://www.mozilla.org/security/advisories/mfsa2021-23/
- https://www.mozilla.org/security/advisories/mfsa2021-24/
- https://www.mozilla.org/security/advisories/mfsa2021-24/
- https://www.mozilla.org/security/advisories/mfsa2021-26/
- https://www.mozilla.org/security/advisories/mfsa2021-26/
Modified: 2024-11-21
CVE-2021-29967
Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and Firefox ESR < 78.11.
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=1602862%2C1703191%2C1703760%2C1704722%2C1706041
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=1602862%2C1703191%2C1703760%2C1704722%2C1706041
- GLSA-202208-14
- GLSA-202208-14
- https://www.mozilla.org/security/advisories/mfsa2021-23/
- https://www.mozilla.org/security/advisories/mfsa2021-23/
- https://www.mozilla.org/security/advisories/mfsa2021-24/
- https://www.mozilla.org/security/advisories/mfsa2021-24/
- https://www.mozilla.org/security/advisories/mfsa2021-26/
- https://www.mozilla.org/security/advisories/mfsa2021-26/
Package firefox-esr updated to version 78.11.0-alt0.c9.1 for branch c9f2 in task 273366.
Closed vulnerabilities
BDU:2021-02858
Уязвимость браузера Mozilla Firefox, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код
BDU:2021-02898
Уязвимость почтового клиента Mozilla Thunderbird, связанная с чтением за границами буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальной информации
Modified: 2024-11-21
CVE-2021-29964
A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds read. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and Firefox ESR < 78.11.
- https://bugzilla.mozilla.org/show_bug.cgi?id=1706501
- https://bugzilla.mozilla.org/show_bug.cgi?id=1706501
- https://www.mozilla.org/security/advisories/mfsa2021-23/
- https://www.mozilla.org/security/advisories/mfsa2021-23/
- https://www.mozilla.org/security/advisories/mfsa2021-24/
- https://www.mozilla.org/security/advisories/mfsa2021-24/
- https://www.mozilla.org/security/advisories/mfsa2021-26/
- https://www.mozilla.org/security/advisories/mfsa2021-26/
Modified: 2024-11-21
CVE-2021-29967
Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and Firefox ESR < 78.11.
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=1602862%2C1703191%2C1703760%2C1704722%2C1706041
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=1602862%2C1703191%2C1703760%2C1704722%2C1706041
- GLSA-202208-14
- GLSA-202208-14
- https://www.mozilla.org/security/advisories/mfsa2021-23/
- https://www.mozilla.org/security/advisories/mfsa2021-23/
- https://www.mozilla.org/security/advisories/mfsa2021-24/
- https://www.mozilla.org/security/advisories/mfsa2021-24/
- https://www.mozilla.org/security/advisories/mfsa2021-26/
- https://www.mozilla.org/security/advisories/mfsa2021-26/