Mozilla Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 8.2
  CVE-2022-36059

  Prototype pollution in matrix-js-sdk

  matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the …

  Matrix matrix-js-sdk thunderbird thunderbird Debian Ubuntu Alpine npm
  Mar 28, 2023
• High 8.1
  CVE-2022-3033

  If a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with the <code>meta</code> ta…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Dec 22, 2022
• Medium 4.3
  CVE-2022-3034

  When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Dec 22, 2022
• Unscored —
  CVE-2022-3032

  When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute …

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Dec 22, 2022

Revision history

1. 2023-02-22 #11

   Neue Updates von Amazon aufgenommen

2. 2022-12-06 #10

   Neue Updates von Amazon aufgenommen

3. 2022-10-26 #9

   Neue Updates von Oracle Linux aufgenommen

4. 2022-10-18 #8

   Neue Updates aufgenommen

5. 2022-10-09 #7

   Neue Updates von Ubuntu aufgenommen

6. 2022-09-28 #6

   Neue Updates von Oracle Linux aufgenommen

7. 2022-09-26 #5

   Neue Updates von Red Hat aufgenommen

8. 2022-09-19 #4

   Neue Updates von Mozilla aufgenommen

9. 2022-09-15 #3

   Neue Updates von SUSE aufgenommen

10. 2022-09-01 #2

    Referenz(en) aufgenommen: FEDORA-2022-E8E79B8DBF

11. 2022-08-31 #1

    Initiale Fassung

References

• Amazon Linux Security Advisory ALAS-2023-1951 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1951.html
• Amazon Linux Security Advisory ALAS-2022-1900 vom 2022-12-07
  https://alas.aws.amazon.com/AL2/ALAS-2022-1900.html
• Mozilla Security Advisory vom 2022-08-31
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-38/
• SUSE Security Update SUSE-SU-2022:3281-1 vom 2022-09-15
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012251.html
• Mozilla Security Advisory MFSA2022-39 vom 2022-09-19
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-39/
• Red Hat Security Advisory RHSA-2022:6713 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6713
• Red Hat Security Advisory RHSA-2022:6708 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6708
• Red Hat Security Advisory RHSA-2022:6715 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6715
• Red Hat Security Advisory RHSA-2022:6716 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6716
• Red Hat Security Advisory RHSA-2022:6710 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6710
• Red Hat Security Advisory RHSA-2022:6717 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6717
• Oracle Linux Security Advisory ELSA-2022-6717 vom 2022-09-28
  https://linux.oracle.com/errata/ELSA-2022-6717.html
• Oracle Linux Security Advisory ELSA-2022-6708 vom 2022-09-28
  https://linux.oracle.com/errata/ELSA-2022-6708.html
• Ubuntu Security Notice USN-5663-1 vom 2022-10-07
  https://ubuntu.com/security/notices/USN-5663-1
• Oracle Linux Bulletin-October 2022 vom 2022-10-18
  https://www.oracle.com/security-alerts/linuxbulletinoct2022.html
• Oracle Linux Security Advisory ELSA-2022-6710 vom 2022-10-27
  https://linux.oracle.com/errata/ELSA-2022-6710.html