icedove - security update

Fixed packages 1

Vulnerabilities 8

• Unscored —
  CVE-2016-9893

  Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we pr…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2016-9895

  Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inlin…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2016-9897

  Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2016-9898

  Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerabil…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2016-9899 Public exploit EPSS 19%

  Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2016-9900

  External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2016-9904

  An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 11, 2018
• Unscored —
  CVE-2016-9905

  A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability a…

  Mozilla Thunderbird Firefox ESR thunderbird Browsers Debian Ubuntu Alpine
  Jun 11, 2018