Alerts This Week
Warning Icon 1 1,220
Alerts This Week
Warning Icon 1 1,220

Mageia 9: MGASA-2024-0395 Moderate: Thunderbird Path Traversal Fix

mageia
Calendar Grey December 21, 2024
Dist Mageia Esm H88
Mageia 2024-0396 addresses a vulnerability in firefox concerning inadequate input checks, released on 22 Dec 2024.
Matrix-js-sdk has insufficient MXC URI validation which could allow client-side path traversal

Summary

Matrix-js-sdk has insufficient MXC URI validation which could allow client-side path traversal. (CVE-2024-50336)

References

- https://bugs.mageia.org/show_bug.cgi?id=33852

- https://www.thunderbird.net/en-US/thunderbird/128.5.2esr/releasenotes/

- https://www.mozilla.org/en-US/security/advisories/mfsa2024-69/

- https://www.cve.org/CVERecord?id=CVE-2024-50336

Topics%20covered

Topics Covered

security advisory update thunderbird path traversal client-side insufficient validation Mageia

Resolution

SRPMS

- 9/core/thunderbird-128.5.2-1.mga9

- 9/core/thunderbird-l10n-128.5.2-1.mga9

Publication date: 21 Dec 2024
URL: https://advisories.mageia.org/MGASA-2024-0395.html
Type: security
CVE: CVE-2024-50336

Topics%20covered

Topics Covered

security advisory update thunderbird path traversal client-side insufficient validation Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here