Test Kennung:	1.3.6.1.4.1.25623.1.0.884214
Kategorie:	CentOS Local Security Checks
Titel:	CentOS: Security Advisory for thunderbird (CESA-2022:1725)
Zusammenfassung:	The remote host is missing an update for the 'thunderbird'; package(s) announced via the CESA-2022:1725 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'thunderbird' package(s) announced via the CESA-2022:1725 advisory. Vulnerability Insight: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.9.0. Security Fix(es): * Mozilla: Bypassing permission prompt in nested browsing contexts (CVE-2022-29909) * Mozilla: iframe Sandbox bypass (CVE-2022-29911) * Mozilla: Fullscreen notification bypass using popups (CVE-2022-29914) * Mozilla: Leaking browser history with CSS variables (CVE-2022-29916) * Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9 (CVE-2022-29917) * Mozilla: Reader mode bypassed SameSite cookies (CVE-2022-29912) * Mozilla: Speech Synthesis feature not properly disabled (CVE-2022-29913) * Mozilla: Incorrect security status shown after viewing an attached email (CVE-2022-1520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: 'thunderbird' package(s) on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-1520 https://bugzilla.mozilla.org/show_bug.cgi?id=1745019 https://www.mozilla.org/security/advisories/mfsa2022-18/ Common Vulnerability Exposure (CVE) ID: CVE-2022-29909 https://bugzilla.mozilla.org/show_bug.cgi?id=1755081 https://www.mozilla.org/security/advisories/mfsa2022-16/ https://www.mozilla.org/security/advisories/mfsa2022-17/ Common Vulnerability Exposure (CVE) ID: CVE-2022-29911 https://bugzilla.mozilla.org/show_bug.cgi?id=1761981 Common Vulnerability Exposure (CVE) ID: CVE-2022-29912 https://bugzilla.mozilla.org/show_bug.cgi?id=1692655 Common Vulnerability Exposure (CVE) ID: CVE-2022-29913 https://bugzilla.mozilla.org/show_bug.cgi?id=1764778 Common Vulnerability Exposure (CVE) ID: CVE-2022-29914 https://bugzilla.mozilla.org/show_bug.cgi?id=1746448 Common Vulnerability Exposure (CVE) ID: CVE-2022-29916 https://bugzilla.mozilla.org/show_bug.cgi?id=1760674 Common Vulnerability Exposure (CVE) ID: CVE-2022-29917 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684739%2C1706441%2C1753298%2C1762614%2C1762620%2C1764778
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.