Mozilla Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 6

• High 8.8
  CVE-2023-28162

  While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• High 8.8
  CVE-2023-28176

  Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruptio…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Medium 6.5
  CVE-2023-28163

  When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable n…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Alpine
  Jun 2, 2023
• Medium 6.5
  CVE-2023-28164

  Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-25751

  Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorr…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-25752

  When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be withi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023

Revision history

1. 2023-05-29 #10

   Neue Updates von Gentoo aufgenommen

2. 2023-04-03 #9

   Neue Updates von SUSE aufgenommen

3. 2023-03-29 #8

   Neue Updates von Fedora aufgenommen

4. 2023-03-26 #7

   Neue Updates von Ubuntu aufgenommen

5. 2023-03-23 #6

   Neue Updates von Red Hat aufgenommen

6. 2023-03-22 #5

   Neue Updates von Red Hat und Oracle Linux aufgenommen

7. 2023-03-21 #4

   Neue Updates von Amazon aufgenommen

8. 2023-03-19 #3

   Neue Updates von Debian aufgenommen

9. 2023-03-16 #2

   Neue Updates von Debian aufgenommen

10. 2023-03-15 #1

    Initiale Fassung

References

• Gentoo Linux Security Advisory GLSA-202305-36 vom 2023-05-30
  https://security.gentoo.org/glsa/202305-36
• SUSE Security Update SUSE-SU-2023:1736-1 vom 2023-04-03
  https://lists.suse.com/pipermail/sle-security-updates/2023-April/014339.html
• Fedora Security Advisory FEDORA-2023-0E1AE0D5F6 vom 2023-03-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-0e1ae0d5f6
• Red Hat Security Advisory RHSA-2023:1472 vom 2023-03-27
  https://access.redhat.com/errata/RHSA-2023:1472
• Ubuntu Security Notice USN-5972-1 vom 2023-03-27
  https://ubuntu.com/security/notices/USN-5972-1
• Red Hat Security Advisory RHSA-2023:1443 vom 2023-03-23
  https://access.redhat.com/errata/RHSA-2023:1443
• Red Hat Security Advisory RHSA-2023:1442 vom 2023-03-23
  https://access.redhat.com/errata/RHSA-2023:1442
• Oracle Linux Security Advisory ELSA-2023-1401 vom 2023-03-23
  http://linux.oracle.com/errata/ELSA-2023-1401.html
• Oracle Linux Security Advisory ELSA-2023-1407 vom 2023-03-22
  https://linux.oracle.com/errata/ELSA-2023-1407.html
• Oracle Linux Security Advisory ELSA-2023-1407 vom 2023-03-23
  http://linux.oracle.com/errata/ELSA-2023-1407.html
• Red Hat Security Advisory RHSA-2023:1407 vom 2023-03-22
  https://access.redhat.com/errata/RHSA-2023:1407
• Amazon Linux Security Advisory ALAS-2023-1988 vom 2023-03-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1988.html
• Debian Security Advisory DLA-3365 vom 2023-03-20
  https://lists.debian.org/debian-lts-announce/2023/03/msg00018.html
• Oracle Linux Security Advisory ELSA-2023-1403 vom 2023-03-23
  http://linux.oracle.com/errata/ELSA-2023-1403.html
• Red Hat Security Advisory RHSA-2023:1402 vom 2023-03-22
  https://access.redhat.com/errata/RHSA-2023:1402
• Red Hat Security Advisory RHSA-2023:1401 vom 2023-03-22
  https://access.redhat.com/errata/RHSA-2023:1401
• Red Hat Security Advisory RHSA-2023:1404 vom 2023-03-22
  https://access.redhat.com/errata/RHSA-2023:1404
• Red Hat Security Advisory RHSA-2023:1403 vom 2023-03-22
  https://access.redhat.com/errata/RHSA-2023:1403
• Debian Security Advisory DSA-5375 vom 2023-03-17
  https://lists.debian.org/debian-security-announce/2023/msg00064.html
• Fedora Security Advisory FEDORA-2023-F36EF5AB9E vom 2023-03-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-f36ef5ab9e
• Fedora Security Advisory FEDORA-2023-222495C87A vom 2023-03-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-222495c87a
• Mozilla Foundation Security Advisory vom 2023-03-15
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-11/