1
0
MozillaThunderbird/thunderbird-78.5.0.source.tar.xz.asc
Wolfgang Rosenauer 4a95a320a3 - Mozilla Thunderbird 78.5.0
MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=564
2020-11-17 14:20:30 +00:00

17 lines
833 B
Plaintext

-----BEGIN PGP SIGNATURE-----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=TuFJ
-----END PGP SIGNATURE-----