openSUSE: 2021:2458-1 important: MozillaThunderbird
Description
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 78.12 * fixed: Sending an email containing HTML links with spaces in the URL sometimes resulted in broken links * fixed: Folder Pane display theme fixes for macOS * fixed: Chat account settings did not always save as expected * fixed: RSS feed subscriptions sometimes lost * fixed: Calendar: A parsing error for alarm triggers of type "DURATION" caused sync problems for some users * fixed: Various security fixes MFSA 2021-30 (bsc#1188275) * CVE-2021-29969: IMAP server responses sent by a MITM prior to STARTTLS could be processed * CVE-2021-29970: Use-after-free in accessibility features of a document * CVE-2021-30547: Out of bounds write in ANGLE * CVE-2021-29976: Memory safety bugs fixed in Thunderbird 78.12
Patch
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2458=1
Package List
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-78.12.0-8.33.1 MozillaThunderbird-debuginfo-78.12.0-8.33.1 MozillaThunderbird-debugsource-78.12.0-8.33.1 MozillaThunderbird-translations-common-78.12.0-8.33.1 MozillaThunderbird-translations-other-78.12.0-8.33.1
References
https://www.suse.com/security/cve/CVE-2021-29969.html https://www.suse.com/security/cve/CVE-2021-29970.html https://www.suse.com/security/cve/CVE-2021-29976.html https://www.suse.com/security/cve/CVE-2021-30547.html https://bugzilla.suse.com/1188275