[SUSE-SU-2019:0469-1] Security update for MozillaThunderbird
Severity
Important
CVEs
4
Security update for MozillaThunderbird
This update for MozillaThunderbird to version 60.5.1 fixes the following issues:
Security issues fixed (MFSA 2019-06 bsc#1125330):
- CVE-2018-18335: Fixed a Buffer overflow in Skia by default deactivating Canvas 2D. This issue does not affect Linuc distributions.
- CVE-2018-18509: Fixed a flaw which during verification of certain S/MIME signatures showing mistakenly that emails bring a valid sugnature.
- CVE-2018-18356: Fixed a Use-after-free in Skia.
- CVE-2019-5785: Fixed an Integer overflow in Skia.
- ID
- SUSE-SU-2019:0469-1
- Severity
- important
- URL
- https://www.suse.com/support/update/announcement/2019/suse-su-20190469-1/
- Published
-
2019-02-22T12:47:05
(5 years ago) - Modified
-
2019-02-22T12:47:05
(5 years ago) - Rights
- Copyright 2024 SUSE LLC. All rights reserved.
- Other Advisories
-
- ALPINE:CVE-2018-18335
- ALPINE:CVE-2018-18356
- ALPINE:CVE-2019-5785
- ASA-201812-2
- ASA-201902-16
- ASA-201902-23
- DSA-4352-1
- DSA-4391-1
- DSA-4392-1
- ELSA-2019-0373
- ELSA-2019-0374
- FEDORA-2019-348547a32d
- FEDORA-2019-859384e002
- FREEBSD:18211552-F650-4D86-BA4F-E6D5CBFCDBEB
- FREEBSD:546D4DD4-10EA-11E9-B407-080027EF1A23
- GLSA-201903-04
- GLSA-201904-07
- GLSA-201908-18
- MFSA-2019-04
- MFSA-2019-05
- MFSA-2019-06
- openSUSE-SU-2018:4143-1
- openSUSE-SU-2019:0248-1
- openSUSE-SU-2019:0249-1
- openSUSE-SU-2019:0251-1
- openSUSE-SU-2019:1126-1
- openSUSE-SU-2019:1162-1
- RHSA-2018:3803
- RHSA-2019:0373
- RHSA-2019:0374
- RHSA-2019:0680
- RHSA-2019:0681
- RHSA-2019:1144
- SSA:2019-044-01
- SSA:2019-045-01
- SUSE-SU-2019:0852-1
- SUSE-SU-2019:0853-1
- SUSE-SU-2019:0871-1
- USN-3896-1
- USN-3897-1
Source | # ID | Name | URL |
---|---|---|---|
Suse | SUSE ratings | https://www.suse.com/support/security/rating/ | |
Suse | URL of this CSAF notice | https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_0469-1.json | |
Suse | URL for SUSE-SU-2019:0469-1 | https://www.suse.com/support/update/announcement/2019/suse-su-20190469-1/ | |
Suse | E-Mail link for SUSE-SU-2019:0469-1 | https://lists.suse.com/pipermail/sle-security-updates/2019-February/005148.html | |
Bugzilla | SUSE Bug 1125330 | https://bugzilla.suse.com/1125330 | |
CVE | SUSE CVE CVE-2018-18335 page | https://www.suse.com/security/cve/CVE-2018-18335/ | |
CVE | SUSE CVE CVE-2018-18356 page | https://www.suse.com/security/cve/CVE-2018-18356/ | |
CVE | SUSE CVE CVE-2018-18509 page | https://www.suse.com/security/cve/CVE-2018-18509/ | |
CVE | SUSE CVE CVE-2019-5785 page | https://www.suse.com/security/cve/CVE-2019-5785/ |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |