openSUSE 12 Moderate: Mozilla Thunderbird Update for Email Privacy

This update for Mozilla Thunderbird to version 52.9.0 fixes multiple

issues.

Security issues fixed, inherited from the Mozilla common code base (MFSA

2018-16, bsc#1098998):

- CVE-2018-12359: Buffer overflow using computed size of canvas element

- CVE-2018-12360: Use-after-free when using focus()

- CVE-2018-12362: Integer overflow in SSSE3 scaler

- CVE-2018-12363: Use-after-free when appending DOM nodes

- CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins

- CVE-2018-12365: Compromised IPC child process can list local filenames

- CVE-2018-12366: Invalid data handling during QCMS transformations

- CVE-2018-5188: Memory safety bugs fixed in Thunderbird 52.9.0

Security issues fixed that affect e-mail privacy and integrity (including

EFAIL):

- CVE-2018-12372: S/MIME and PGP decryption oracles can be built with HTML

emails (bsc#1100082)

- CVE-2018-12373: S/MIME plaintext can be leaked through HTML

reply/forward...