Mozilla Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• Critical 9.8
  CVE-2022-29917

  Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bu…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-29909

  Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level orig…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-29913

  The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instruction…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-29914

  When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-29916

  Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. Th…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.1
  CVE-2022-29911

  An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.1
  CVE-2022-29912

  Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability affe…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 4.3
  CVE-2022-1520

  When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine
  Dec 22, 2022

Revision history

1. 2025-04-01 #11

   Neue Updates von Amazon aufgenommen

2. 2022-08-14 #10

   Neue Updates von Gentoo aufgenommen

3. 2022-07-03 #9

   Neue Updates von Oracle Linux aufgenommen

4. 2022-05-23 #8

   Neue Updates von Ubuntu aufgenommen

5. 2022-05-22 #7

   Neue Updates von Debian aufgenommen

6. 2022-05-19 #6

   Neue Updates von Red Hat und Debian aufgenommen

7. 2022-05-17 #5

   Neue Updates von SUSE aufgenommen

8. 2022-05-16 #4

   Neue Updates von Arch Linux aufgenommen

9. 2022-05-08 #3

   Neue Updates von CentOS aufgenommen

10. 2022-05-05 #2

    Neue Updates von Oracle Linux und Red Hat aufgenommen

11. 2022-05-04 #1

    Initiale Fassung

References

• Mozilla Foundation Security Advisory vom 2022-05-04
  http://www.mozilla.org/en-US/security/advisories/mfsa2022-18/
• Oracle Linux Security Advisory ELSA-2022-1725 vom 2022-05-06
  http://linux.oracle.com/errata/ELSA-2022-1725.html
• Red Hat Security Advisory RHSA-2022:1730 vom 2022-05-05
  https://access.redhat.com/errata/RHSA-2022:1730
• Red Hat Security Advisory RHSA-2022:1727 vom 2022-05-05
  https://access.redhat.com/errata/RHSA-2022:1727
• Red Hat Security Advisory RHSA-2022:1726 vom 2022-05-05
  https://access.redhat.com/errata/RHSA-2022:1726
• Red Hat Security Advisory RHSA-2022:1725 vom 2022-05-05
  https://access.redhat.com/errata/RHSA-2022:1725
• Red Hat Security Advisory RHSA-2022:1724 vom 2022-05-05
  https://access.redhat.com/errata/RHSA-2022:1724
• Oracle Linux Security Advisory ELSA-2022-1730 vom 2022-05-06
  http://linux.oracle.com/errata/ELSA-2022-1730.html
• CentOS Security Advisory CESA-2022:1725 vom 2022-05-06
  https://lists.centos.org/pipermail/centos-announce/2022-May/073582.html
• Arch Linux Security Advisory ASA-202205-3 vom 2022-05-17
  https://security.archlinux.org/ASA-202205-3
• SUSE Security Update SUSE-SU-2022:1719-1 vom 2022-05-17
  https://lists.suse.com/pipermail/sle-security-updates/2022-May/011060.html
• Red Hat Security Advisory RHSA-2022:4589 vom 2022-05-20
  https://access.redhat.com/errata/RHSA-2022:4589
• Debian Security Advisory DSA-5141 vom 2022-05-19
  https://lists.debian.org/debian-security-announce/2022/msg00109.html
• Debian Security Advisory DLA-3020 vom 2022-05-23
  https://lists.debian.org/debian-lts-announce/2022/05/msg00030.html
• Ubuntu Security Notice USN-5435-1 vom 2022-05-23
  https://ubuntu.com/security/notices/USN-5435-1
• Oracle Linux Security Advisory ELSA-2022-4589 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-4589.html
• Gentoo Linux Security Advisory GLSA-202208-14 vom 2022-08-14
  https://security.gentoo.org/glsa/202208-14
• Amazon Linux Security Advisory ALAS-2025-2807 vom 2025-04-02
  https://alas.aws.amazon.com/AL2/ALAS-2025-2807.html
• Amazon Linux Security Advisory ALASFIREFOX-2025-036 vom 2025-04-01
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2025-036.html