openSUSE Security Update: MozillaThunderbird: Update to Thunderbird 3.1.11
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2011:0724-1
Rating:             important
References:         #701296 
Cross-References:   CVE-2011-0083 CVE-2011-0085 CVE-2011-2362
                    CVE-2011-2363 CVE-2011-2364 CVE-2011-2365
                    CVE-2011-2371 CVE-2011-2373 CVE-2011-2374
                    CVE-2011-2376 CVE-2011-2377
Affected Products:
                    openSUSE 11.4
                    openSUSE 11.3
______________________________________________________________________________

   An update that fixes 11 vulnerabilities is now available.
   It includes 5 new package versions.

Description:

   Mozilla Thunderbird was updated to the 3.1.11 release.

   It has new features, fixes lots of bugs, and also fixes the
   following security issues:
   * MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364
   CVE-2011-2365 Miscellaneous memory safety hazards
   * MFSA 2011-20/CVE-2011-2373 (bmo#617247) Use-after-free
   vulnerability when viewing XUL document with script
   disabled
   * MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303)
   Memory corruption due to multipart/x-mixed-replace
   images
   * MFSA 2011-22/CVE-2011-2371 (bmo#664009) Integer
   overflow and arbitrary code execution in
   Array.reduceRight()
   * MFSA 2011-23/CVE-2011-0083 CVE-2011-0085 CVE-2011-2363
   Multiple dangling pointer vulnerabilities
   * MFSA 2011-24/CVE-2011-2362 (bmo#616264) Cookie
   isolation error


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 11.4:

      zypper in -t patch MozillaThunderbird-4800 firefox50-upgrade-4806 mozilla-js192-4771

   - openSUSE 11.3:

      zypper in -t patch MozillaFirefox-4761 MozillaThunderbird-4800

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.18,3.1.11 and 5.0]:

      MozillaFirefox-5.0-0.2.1
      MozillaFirefox-branding-openSUSE-5.0-2.3.1
      MozillaFirefox-buildsymbols-5.0-0.2.1
      MozillaFirefox-devel-5.0-0.2.1
      MozillaFirefox-translations-common-5.0-0.2.1
      MozillaFirefox-translations-other-5.0-0.2.1
      MozillaThunderbird-3.1.11-0.7.1
      MozillaThunderbird-buildsymbols-3.1.11-0.7.1
      MozillaThunderbird-devel-3.1.11-0.7.1
      MozillaThunderbird-translations-common-3.1.11-0.7.1
      MozillaThunderbird-translations-other-3.1.11-0.7.1
      enigmail-1.1.2-9.7.1
      mozilla-js192-1.9.2.18-1.2.1
      mozilla-xulrunner192-1.9.2.18-1.2.1
      mozilla-xulrunner192-buildsymbols-1.9.2.18-1.2.1
      mozilla-xulrunner192-devel-1.9.2.18-1.2.1
      mozilla-xulrunner192-gnome-1.9.2.18-1.2.1
      mozilla-xulrunner192-translations-common-1.9.2.18-1.2.1
      mozilla-xulrunner192-translations-other-1.9.2.18-1.2.1

   - openSUSE 11.4 (x86_64) [New Version: 1.9.2.18]:

      mozilla-js192-32bit-1.9.2.18-1.2.1
      mozilla-xulrunner192-32bit-1.9.2.18-1.2.1
      mozilla-xulrunner192-gnome-32bit-1.9.2.18-1.2.1
      mozilla-xulrunner192-translations-common-32bit-1.9.2.18-1.2.1
      mozilla-xulrunner192-translations-other-32bit-1.9.2.18-1.2.1

   - openSUSE 11.3 (i586 x86_64) [New Version: 1.1.2,1.9.2.18,3.1.11 and 3.6.18]:

      MozillaFirefox-3.6.18-0.2.1
      MozillaFirefox-branding-upstream-3.6.18-0.2.1
      MozillaFirefox-translations-common-3.6.18-0.2.1
      MozillaFirefox-translations-other-3.6.18-0.2.1
      MozillaThunderbird-3.1.11-0.11.1
      MozillaThunderbird-devel-3.1.11-0.11.1
      MozillaThunderbird-translations-common-3.1.11-0.11.1
      MozillaThunderbird-translations-other-3.1.11-0.11.1
      enigmail-1.1.2-9.11.1
      mozilla-js192-1.9.2.18-1.2.1
      mozilla-xulrunner192-1.9.2.18-1.2.1
      mozilla-xulrunner192-buildsymbols-1.9.2.18-1.2.1
      mozilla-xulrunner192-devel-1.9.2.18-1.2.1
      mozilla-xulrunner192-gnome-1.9.2.18-1.2.1
      mozilla-xulrunner192-translations-common-1.9.2.18-1.2.1
      mozilla-xulrunner192-translations-other-1.9.2.18-1.2.1

   - openSUSE 11.3 (x86_64) [New Version: 1.9.2.18]:

      mozilla-js192-32bit-1.9.2.18-1.2.1
      mozilla-xulrunner192-32bit-1.9.2.18-1.2.1
      mozilla-xulrunner192-gnome-32bit-1.9.2.18-1.2.1
      mozilla-xulrunner192-translations-common-32bit-1.9.2.18-1.2.1
      mozilla-xulrunner192-translations-other-32bit-1.9.2.18-1.2.1


References:

   https://www.suse.com/security/cve/CVE-2011-0083.html
   https://www.suse.com/security/cve/CVE-2011-0085.html
   https://www.suse.com/security/cve/CVE-2011-2362.html
   https://www.suse.com/security/cve/CVE-2011-2363.html
   https://www.suse.com/security/cve/CVE-2011-2364.html
   https://www.suse.com/security/cve/CVE-2011-2365.html
   https://www.suse.com/security/cve/CVE-2011-2371.html
   https://www.suse.com/security/cve/CVE-2011-2373.html
   https://www.suse.com/security/cve/CVE-2011-2374.html
   https://www.suse.com/security/cve/CVE-2011-2376.html
   https://www.suse.com/security/cve/CVE-2011-2377.html
   https://bugzilla.novell.com/701296

openSUSE: 2011:0724-1: important: MozillaThunderbird

June 30, 2011
An update that fixes 11 vulnerabilities is now available

Description

Mozilla Thunderbird was updated to the 3.1.11 release. It has new features, fixes lots of bugs, and also fixes the following security issues: * MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards * MFSA 2011-20/CVE-2011-2373 (bmo#617247) Use-after-free vulnerability when viewing XUL document with script disabled * MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303) Memory corruption due to multipart/x-mixed-replace images * MFSA 2011-22/CVE-2011-2371 (bmo#664009) Integer overflow and arbitrary code execution in Array.reduceRight() * MFSA 2011-23/CVE-2011-0083 CVE-2011-0085 CVE-2011-2363 Multiple dangling pointer vulnerabilities * MFSA 2011-24/CVE-2011-2362 (bmo#616264) Cookie isolation error

 

Patch

Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaThunderbird-4800 firefox50-upgrade-4806 mozilla-js192-4771 - openSUSE 11.3: zypper in -t patch MozillaFirefox-4761 MozillaThunderbird-4800 To bring your system up-to-date, use "zypper patch".


Package List

- openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.18,3.1.11 and 5.0]: MozillaFirefox-5.0-0.2.1 MozillaFirefox-branding-openSUSE-5.0-2.3.1 MozillaFirefox-buildsymbols-5.0-0.2.1 MozillaFirefox-devel-5.0-0.2.1 MozillaFirefox-translations-common-5.0-0.2.1 MozillaFirefox-translations-other-5.0-0.2.1 MozillaThunderbird-3.1.11-0.7.1 MozillaThunderbird-buildsymbols-3.1.11-0.7.1 MozillaThunderbird-devel-3.1.11-0.7.1 MozillaThunderbird-translations-common-3.1.11-0.7.1 MozillaThunderbird-translations-other-3.1.11-0.7.1 enigmail-1.1.2-9.7.1 mozilla-js192-1.9.2.18-1.2.1 mozilla-xulrunner192-1.9.2.18-1.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.18-1.2.1 mozilla-xulrunner192-devel-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-1.9.2.18-1.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.18]: mozilla-js192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.18-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.1.2,1.9.2.18,3.1.11 and 3.6.18]: MozillaFirefox-3.6.18-0.2.1 MozillaFirefox-branding-upstream-3.6.18-0.2.1 MozillaFirefox-translations-common-3.6.18-0.2.1 MozillaFirefox-translations-other-3.6.18-0.2.1 MozillaThunderbird-3.1.11-0.11.1 MozillaThunderbird-devel-3.1.11-0.11.1 MozillaThunderbird-translations-common-3.1.11-0.11.1 MozillaThunderbird-translations-other-3.1.11-0.11.1 enigmail-1.1.2-9.11.1 mozilla-js192-1.9.2.18-1.2.1 mozilla-xulrunner192-1.9.2.18-1.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.18-1.2.1 mozilla-xulrunner192-devel-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-1.9.2.18-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.2.18]: mozilla-js192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.18-1.2.1


References

https://www.suse.com/security/cve/CVE-2011-0083.html https://www.suse.com/security/cve/CVE-2011-0085.html https://www.suse.com/security/cve/CVE-2011-2362.html https://www.suse.com/security/cve/CVE-2011-2363.html https://www.suse.com/security/cve/CVE-2011-2364.html https://www.suse.com/security/cve/CVE-2011-2365.html https://www.suse.com/security/cve/CVE-2011-2371.html https://www.suse.com/security/cve/CVE-2011-2373.html https://www.suse.com/security/cve/CVE-2011-2374.html https://www.suse.com/security/cve/CVE-2011-2376.html https://www.suse.com/security/cve/CVE-2011-2377.html https://bugzilla.novell.com/701296


Severity
Announcement ID: openSUSE-SU-2011:0724-1
Rating: important
Affected Products: openSUSE 11.4 openSUSE 11.3 . It includes 5 new package versions.

Related News

4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved