1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2023:3228-1

[SUSE-SU-2023:3228-1] Security update for MozillaThunderbird

Severity Important
Affected Packages 24
CVEs 11
Info Packages References Vulnerabilities

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Update Mozilla Thunderbird 115.1.0 (bsc#1213746):

  • CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  • CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  • CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  • CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  • CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  • CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  • CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  • CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  • CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  • CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  • CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).

Bugfixes:

  • Remove bashisms from startup-script (bsc#1213657).
Package Affected Version
pkg:rpm/suse/MozillaThunderbird?arch=x86_64&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird?arch=x86_64&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird?arch=s390x&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird?arch=s390x&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird?arch=ppc64le&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird?arch=ppc64le&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird?arch=aarch64&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird?arch=aarch64&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-other?arch=x86_64&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-other?arch=x86_64&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-other?arch=s390x&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-other?arch=s390x&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-other?arch=ppc64le&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-other?arch=ppc64le&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-other?arch=aarch64&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-other?arch=aarch64&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-common?arch=x86_64&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-common?arch=x86_64&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-common?arch=s390x&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-common?arch=s390x&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-common?arch=ppc64le&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-common?arch=ppc64le&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-common?arch=aarch64&distro=opensuse-leap-15.5 < 115.1.0-150200.8.127.1
pkg:rpm/suse/MozillaThunderbird-translations-common?arch=aarch64&distro=opensuse-leap-15.4 < 115.1.0-150200.8.127.1
ID
SUSE-SU-2023:3228-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2023/suse-su-20233228-1/
Published
2023-08-08T11:54:49
(13 months ago)
Modified
2023-08-08T11:54:49
(13 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/MozillaThunderbird?arch=x86_64&distro=opensuse-leap-15.5 suse MozillaThunderbird < 115.1.0-150200.8.127.1 opensuse-leap-15.5 x86_64
Affected pkg:rpm/suse/MozillaThunderbird?arch=x86_64&distro=opensuse-leap-15.4 suse MozillaThunderbird < 115.1.0-150200.8.127.1 opensuse-leap-15.4 x86_64
Affected pkg:rpm/suse/MozillaThunderbird?arch=s390x&distro=opensuse-leap-15.5 suse MozillaThunderbird < 115.1.0-150200.8.127.1 opensuse-leap-15.5 s390x
Affected pkg:rpm/suse/MozillaThunderbird?arch=s390x&distro=opensuse-leap-15.4 suse MozillaThunderbird < 115.1.0-150200.8.127.1 opensuse-leap-15.4 s390x
Affected pkg:rpm/suse/MozillaThunderbird?arch=ppc64le&distro=opensuse-leap-15.5 suse MozillaThunderbird < 115.1.0-150200.8.127.1 opensuse-leap-15.5 ppc64le
Affected pkg:rpm/suse/MozillaThunderbird?arch=ppc64le&distro=opensuse-leap-15.4 suse MozillaThunderbird < 115.1.0-150200.8.127.1 opensuse-leap-15.4 ppc64le
Affected pkg:rpm/suse/MozillaThunderbird?arch=aarch64&distro=opensuse-leap-15.5 suse MozillaThunderbird < 115.1.0-150200.8.127.1 opensuse-leap-15.5 aarch64
Affected pkg:rpm/suse/MozillaThunderbird?arch=aarch64&distro=opensuse-leap-15.4 suse MozillaThunderbird < 115.1.0-150200.8.127.1 opensuse-leap-15.4 aarch64
Affected pkg:rpm/suse/MozillaThunderbird-translations-other?arch=x86_64&distro=opensuse-leap-15.5 suse MozillaThunderbird-translations-other < 115.1.0-150200.8.127.1 opensuse-leap-15.5 x86_64
Affected pkg:rpm/suse/MozillaThunderbird-translations-other?arch=x86_64&distro=opensuse-leap-15.4 suse MozillaThunderbird-translations-other < 115.1.0-150200.8.127.1 opensuse-leap-15.4 x86_64
Affected pkg:rpm/suse/MozillaThunderbird-translations-other?arch=s390x&distro=opensuse-leap-15.5 suse MozillaThunderbird-translations-other < 115.1.0-150200.8.127.1 opensuse-leap-15.5 s390x
Affected pkg:rpm/suse/MozillaThunderbird-translations-other?arch=s390x&distro=opensuse-leap-15.4 suse MozillaThunderbird-translations-other < 115.1.0-150200.8.127.1 opensuse-leap-15.4 s390x
Affected pkg:rpm/suse/MozillaThunderbird-translations-other?arch=ppc64le&distro=opensuse-leap-15.5 suse MozillaThunderbird-translations-other < 115.1.0-150200.8.127.1 opensuse-leap-15.5 ppc64le
Affected pkg:rpm/suse/MozillaThunderbird-translations-other?arch=ppc64le&distro=opensuse-leap-15.4 suse MozillaThunderbird-translations-other < 115.1.0-150200.8.127.1 opensuse-leap-15.4 ppc64le
Affected pkg:rpm/suse/MozillaThunderbird-translations-other?arch=aarch64&distro=opensuse-leap-15.5 suse MozillaThunderbird-translations-other < 115.1.0-150200.8.127.1 opensuse-leap-15.5 aarch64
Affected pkg:rpm/suse/MozillaThunderbird-translations-other?arch=aarch64&distro=opensuse-leap-15.4 suse MozillaThunderbird-translations-other < 115.1.0-150200.8.127.1 opensuse-leap-15.4 aarch64
Affected pkg:rpm/suse/MozillaThunderbird-translations-common?arch=x86_64&distro=opensuse-leap-15.5 suse MozillaThunderbird-translations-common < 115.1.0-150200.8.127.1 opensuse-leap-15.5 x86_64
Affected pkg:rpm/suse/MozillaThunderbird-translations-common?arch=x86_64&distro=opensuse-leap-15.4 suse MozillaThunderbird-translations-common < 115.1.0-150200.8.127.1 opensuse-leap-15.4 x86_64
Affected pkg:rpm/suse/MozillaThunderbird-translations-common?arch=s390x&distro=opensuse-leap-15.5 suse MozillaThunderbird-translations-common < 115.1.0-150200.8.127.1 opensuse-leap-15.5 s390x
Affected pkg:rpm/suse/MozillaThunderbird-translations-common?arch=s390x&distro=opensuse-leap-15.4 suse MozillaThunderbird-translations-common < 115.1.0-150200.8.127.1 opensuse-leap-15.4 s390x
Affected pkg:rpm/suse/MozillaThunderbird-translations-common?arch=ppc64le&distro=opensuse-leap-15.5 suse MozillaThunderbird-translations-common < 115.1.0-150200.8.127.1 opensuse-leap-15.5 ppc64le
Affected pkg:rpm/suse/MozillaThunderbird-translations-common?arch=ppc64le&distro=opensuse-leap-15.4 suse MozillaThunderbird-translations-common < 115.1.0-150200.8.127.1 opensuse-leap-15.4 ppc64le
Affected pkg:rpm/suse/MozillaThunderbird-translations-common?arch=aarch64&distro=opensuse-leap-15.5 suse MozillaThunderbird-translations-common < 115.1.0-150200.8.127.1 opensuse-leap-15.5 aarch64
Affected pkg:rpm/suse/MozillaThunderbird-translations-common?arch=aarch64&distro=opensuse-leap-15.4 suse MozillaThunderbird-translations-common < 115.1.0-150200.8.127.1 opensuse-leap-15.4 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date