ALT-BU-2021-4040-1
Branch c9f2 update bulletin.
Package thunderbird updated to version 78.12.0-alt0.c9.1 for branch c9f2 in task 278908.
Closed vulnerabilities
BDU:2021-03659
Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird, связанная с использованием памяти после ее освобождения, позволяющая нарушителю выполнить произвольный код
BDU:2021-03660
Уязвимость почтового клиента Mozilla Thunderbird, связанная с записью за границами буфера в памяти, позволяющая нарушителю выполнить произвольный код
BDU:2021-03661
Уязвимость веб-браузеров Firefox, Firefox ESR, почтового клиента Thunderbird, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-03662
Уязвимость почтового клиента Mozilla Thunderbird, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю выполнить произвольный код
Modified: 2024-11-21
CVE-2021-29969
If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS handshake, then Thunderbird didn't ignore the injected data. This could have resulted in Thunderbird showing incorrect information, for example the attacker could have tricked Thunderbird to show folders that didn't exist on the IMAP server. This vulnerability affects Thunderbird < 78.12.
Modified: 2024-11-21
CVE-2021-29970
A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered when accessibility was enabled.*. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90.
- https://bugzilla.mozilla.org/show_bug.cgi?id=1709976
- https://bugzilla.mozilla.org/show_bug.cgi?id=1709976
- GLSA-202202-03
- GLSA-202202-03
- GLSA-202208-14
- GLSA-202208-14
- https://www.mozilla.org/security/advisories/mfsa2021-28/
- https://www.mozilla.org/security/advisories/mfsa2021-28/
- https://www.mozilla.org/security/advisories/mfsa2021-29/
- https://www.mozilla.org/security/advisories/mfsa2021-29/
- https://www.mozilla.org/security/advisories/mfsa2021-30/
- https://www.mozilla.org/security/advisories/mfsa2021-30/
Modified: 2024-11-21
CVE-2021-29976
Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90.
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=1700895%2C1703334%2C1706910%2C1711576%2C1714391
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=1700895%2C1703334%2C1706910%2C1711576%2C1714391
- GLSA-202202-03
- GLSA-202202-03
- GLSA-202208-14
- GLSA-202208-14
- https://www.mozilla.org/security/advisories/mfsa2021-28/
- https://www.mozilla.org/security/advisories/mfsa2021-28/
- https://www.mozilla.org/security/advisories/mfsa2021-29/
- https://www.mozilla.org/security/advisories/mfsa2021-29/
- https://www.mozilla.org/security/advisories/mfsa2021-30/
- https://www.mozilla.org/security/advisories/mfsa2021-30/
Modified: 2024-11-21
CVE-2021-30547
Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html
- https://crbug.com/1210414
- https://crbug.com/1210414
- [debian-lts-announce] 20210715 [SECURITY] [DLA 2709-1] firefox-esr security update
- [debian-lts-announce] 20210715 [SECURITY] [DLA 2709-1] firefox-esr security update
- [debian-lts-announce] 20210719 [SECURITY] [DLA 2711-1] thunderbird security update
- [debian-lts-announce] 20210719 [SECURITY] [DLA 2711-1] thunderbird security update
- FEDORA-2021-ca58c57bdf
- FEDORA-2021-ca58c57bdf
- FEDORA-2021-f94dadff78
- FEDORA-2021-f94dadff78
- GLSA-202202-03
- GLSA-202202-03
- GLSA-202208-14
- GLSA-202208-14
- DSA-4939
- DSA-4939
- DSA-4940
- DSA-4940
Package packageinstall updated to version 1.3-alt1 for branch c9f2 in task 278097.
Closed bugs
По завершении предлагает ждать
Неправильная обработка вывода apt-get
[FR] apt-get update