Test Kennung:	1.3.6.1.4.1.25623.1.0.884223
Kategorie:	CentOS Local Security Checks
Titel:	CentOS: Security Advisory for thunderbird (CESA-2022:4891)
Zusammenfassung:	The remote host is missing an update for the 'thunderbird'; package(s) announced via the CESA-2022:4891 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'thunderbird' package(s) announced via the CESA-2022:4891 advisory. Vulnerability Insight: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.10.0. Security Fix(es): * Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email (CVE-2022-1834) * Mozilla: Cross-Origin resource's length leaked (CVE-2022-31736) * Mozilla: Heap buffer overflow in WebGL (CVE-2022-31737) * Mozilla: Browser window spoof using fullscreen mode (CVE-2022-31738) * Mozilla: Register allocation problem in WASM on arm64 (CVE-2022-31740) * Mozilla: Uninitialized variable leads to invalid memory read (CVE-2022-31741) * Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10 (CVE-2022-31747) * Mozilla: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information (CVE-2022-31742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: 'thunderbird' package(s) on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-1834 https://bugzilla.mozilla.org/show_bug.cgi?id=1767816 https://www.mozilla.org/security/advisories/mfsa2022-22/ Common Vulnerability Exposure (CVE) ID: CVE-2022-31736 https://bugzilla.mozilla.org/show_bug.cgi?id=1735923 https://www.mozilla.org/security/advisories/mfsa2022-20/ https://www.mozilla.org/security/advisories/mfsa2022-21/ Common Vulnerability Exposure (CVE) ID: CVE-2022-31737 https://bugzilla.mozilla.org/show_bug.cgi?id=1743767 Common Vulnerability Exposure (CVE) ID: CVE-2022-31738 https://bugzilla.mozilla.org/show_bug.cgi?id=1756388 Common Vulnerability Exposure (CVE) ID: CVE-2022-31740 https://bugzilla.mozilla.org/show_bug.cgi?id=1766806 Common Vulnerability Exposure (CVE) ID: CVE-2022-31741 https://bugzilla.mozilla.org/show_bug.cgi?id=1767590 Common Vulnerability Exposure (CVE) ID: CVE-2022-31742 https://bugzilla.mozilla.org/show_bug.cgi?id=1730434 Common Vulnerability Exposure (CVE) ID: CVE-2022-31747 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1760765%2C1765610%2C1766283%2C1767365%2C1768559%2C1768734
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.