File _patchinfo of Package patchinfo.32679

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.32679

<patchinfo incident="32679">
  <issue tracker="bnc" id="1220048">VUL-0: MozillaFirefox / MozillaThunderbird: update to 123 and 115.8esr</issue>
  <issue tracker="cve" id="2024-1552"/>
  <issue tracker="cve" id="2024-1548"/>
  <issue tracker="cve" id="2024-1553"/>
  <issue tracker="cve" id="2024-1549"/>
  <issue tracker="cve" id="2024-1550"/>
  <issue tracker="cve" id="2024-1546"/>
  <issue tracker="cve" id="2024-1547"/>
  <issue tracker="cve" id="2024-1551"/>
  <packager>MSirringhaus</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for MozillaThunderbird</summary>
  <description>This update for MozillaThunderbird fixes the following issues:

Mozilla Thunderbird 115.8 (bsc#1220048):

- CVE-2024-1546: Out-of-bounds memory read in networking channels
- CVE-2024-1547: Alert dialog could have been spoofed on another site
- CVE-2024-1548: Fullscreen Notification could have been hidden by select element
- CVE-2024-1549: Custom cursor could obscure the permission dialog
- CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants
- CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in response parts
- CVE-2024-1552: Incorrect code generation on 32-bit ARM devices
- CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.32679

Places