98a906a372
* IMAP could crash when reading cached messages
* Enabling "Show Folder Size" on Maildir profile could render
Thunderbird unusable
* Messages corrupted by folder compaction were only fixed by user
intervention
* Reading a message from past the end of an mbox file did not
cause an error
* View -> Folders had duplicate F access keys
* Add-ons adding columns to the message list could fail and cause
display issue
* "Empty trash on exit" and "Expunge inbox on exit" did not
always work
* Selecting a display option in View -> Tasks did not apply in
the Task interface
MFSA 2024-68 (bsc#1233695)
* CVE-2024-11691 (bmo#1914707, bmo#1924184)
Memory corruption in Apple GPU drivers
* CVE-2024-11692 (bmo#1909535)
Select list elements could be shown over another site
* CVE-2024-11693 (bmo#1921458)
Download Protections were bypassed by .library-ms files on Windows
* CVE-2024-11694 (bmo#1924167)
CSP Bypass and XSS Exposure via Web Compatibility Shims
* CVE-2024-11695 (bmo#1925496)
URL Bar Spoofing via Manipulated Punycode and Whitespace Characters
* CVE-2024-11696 (bmo#1929600)
Unhandled Exception in Add-on Signature Verification
* CVE-2024-11697 (bmo#1842187)
Improper Keypress Handling in Executable File Confirmation Dialog
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=788
21 lines
1020 B
Diff
21 lines
1020 B
Diff
https://github.com/randombit/botan/commit/94e9154c143aa5264da6254a6a1be5bc66ee2b5a
|
|
|
|
diff --git a/comm/third_party/botan/src/lib/pubkey/ec_group/ec_group.cpp b/comm/third_party/botan/src/lib/pubkey/ec_group/ec_group.cpp
|
|
index bb60bacf7ba..214751b4eb0 100644
|
|
--- a/comm/third_party/botan/src/lib/pubkey/ec_group/ec_group.cpp
|
|
+++ b/comm/third_party/botan/src/lib/pubkey/ec_group/ec_group.cpp
|
|
@@ -334,8 +334,11 @@ std::shared_ptr<EC_Group_Data> EC_Group::BER_decode_EC_group(const uint8_t bits[
|
|
.end_cons()
|
|
.verify_end();
|
|
|
|
- if(p.bits() < 64 || p.is_negative() || !is_bailie_psw_probable_prime(p))
|
|
- throw Decoding_Error("Invalid ECC p parameter");
|
|
+ if(p.bits() < 112 || p.bits() > 1024)
|
|
+ throw Decoding_Error("ECC p parameter is invalid size");
|
|
+
|
|
+ if(p.is_negative() || !is_bailie_psw_probable_prime(p))
|
|
+ throw Decoding_Error("ECC p parameter is not a prime");
|
|
|
|
if(a.is_negative() || a >= p)
|
|
throw Decoding_Error("Invalid ECC a parameter");
|