Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

openSUSE 12.1: 2012:0935-2 Critical: Thunderbird Security Patch

opensuse
Calendar Grey August 1, 2012
Dist Opensuse Esm H88
New patch released for openSUSE addressing 15 vulnerabilities in Seamonkey 2.11 to improve overall system safety.
An update that fixes 15 vulnerabilities is now available

Description

Seamonkey was updated to version 2.11 (bnc#771583)

* MFSA 2012-42/CVE-2012-1949/CVE-2012-1948 Miscellaneous

memory safety hazards

* MFSA

2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1

952 Gecko memory corruption

* MFSA 2012-45/CVE-2012-1955 (bmo#757376) Spoofing issue

with location

* MFSA 2012-47/CVE-2012-1957 (bmo#750096) Improper

filtering of javascript in HTML feed-view

* MFSA 2012-48/CVE-2012-1958 (bmo#750820) use-after-free

in nsGlobalWindow::PageHidden

* MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)

Same-compartment Security Wrappers can be bypassed

* MFSA 2012-50/CVE-2012-1960 (bmo#761014) Out of bounds

read in QCMS

* MFSA 2012-51/CVE-2012-1961 (bmo#761655) X-Frame-Options

header ignored when duplicated

* MFSA 2012-52/CVE-2012-1962 (bmo#764296)

JSDependentString::undepend string conversion results

in memory corruption

* MFSA 2012-53/CVE-2012-1963 (bmo#767778) Content

Security Policy 1.0...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory update DoS fix seamonkey openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 12.1:

zypper in -t patch openSUSE-2012-473

- openSUSE 11.4:

zypper in -t patch openSUSE-2012-473

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 12.1 (i586 x86_64):

seamonkey-2.11-2.24.2

seamonkey-debuginfo-2.11-2.24.2

seamonkey-debugsource-2.11-2.24.2

seamonkey-dom-inspector-2.11-2.24.2

seamonkey-irc-2.11-2.24.2

seamonkey-translations-common-2.11-2.24.2

seamonkey-translations-other-2.11-2.24.2

seamonkey-venkman-2.11-2.24.2

- openSUSE 11.4 (i586 x86_64):

seamonkey-2.11-24.3

seamonkey-debuginfo-2.11-24.3

seamonkey-debugsource-2.11-24.3

seamonkey-dom-inspector-2.11-24.3

seamonkey-irc-2.11-24.3

seamonkey-translations-common-2.11-24.3

seamonkey-translations-other-2.11-24.3

seamonkey-venkman-2.11-24.3

References

https://www.suse.com/security/cve/CVE-2012-1948.html

https://www.suse.com/security/cve/CVE-2012-1949.html

https://www.suse.com/security/cve/CVE-2012-1951.html

https://www.suse.com/security/cve/CVE-2012-1952.html

https://www.suse.com/security/cve/CVE-2012-1953.html

https://www.suse.com/security/cve/CVE-2012-1954.html

https://www.suse.com/security/cve/CVE-2012-1955.html

https://www.suse.com/security/cve/CVE-2012-1957.html

https://www.suse.com/security/cve/CVE-2012-1958.html

https://www.suse.com/security/cve/CVE-2012-1959.html

https://www.suse.com/security/cve/CVE-2012-1960.html

https://www.suse.com/security/cve/CVE-2012-1961.html

https://www.suse.com/security/cve/CVE-2012-1962.html

https://www.suse.com/security/cve/CVE-2012-1963.html

https://www.suse.com/security/cve/CVE-2012-1967.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2012:0935-1
Rating: important
Affected Products: openSUSE 12.1 openSUSE 11.4 .

Topics%20covered

Topics Covered

security advisory update DoS fix seamonkey openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here