SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaThunderbird (SUSE-SU-2024:2790-1)
Discription

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2790-1 advisory. Update to Mozilla Thunderbird 115.13 (MFSA 2024-31, bsc#1226316): Security fixes: – CVE-2024-6600: Memory corruption in WebGL API (bmo#1888340) – CVE-2024-6601: Race condition in permission assignment (bmo#1890748) – CVE-2024-6602: Memory corruption in NSS (bmo#1895032) – CVE-2024-6603: Memory corruption in thread creation (bmo#1895081) – CVE-2024-6604: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13 (bmo#1748105, bmo#1837550, bmo#1884266) Other fixes: – fixed: After starting Thunderbird, the message list position was sometimes set to an incorrect position (bmo#1896009) Tenable has extracted the preceding description block directly from the SUSE security advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version…Read More

Back to Main

Subscribe for the latest news: