Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

SUSE Linux 15-SP3: 2022:0804-1 Critical: Mozilla Thunderbird Use-After-Free

suse
Calendar Grey March 10, 2022
Dist Suse Esm H88
SUSE has released an update for MozillaThunderbird addressing critical problems, such as use-after-free vulnerabilities. More information available.
An update that fixes two vulnerabilities is now available

Summary

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 91.6.2 (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-804=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-804=1 Package List: - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64):

Topics%20covered

Topics Covered

security advisory important SUSE Linux Mozilla Thunderbird use-after-free patch instructions

References

#1196809

Cross- CVE-2022-26485 CVE-2022-26486

CVSS scores:

CVE-2022-26485 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2022-26486 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products:

SUSE Linux Enterprise Desktop 15-SP3

SUSE Linux Enterprise High Performance Computing 15-SP3

SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3

SUSE Linux Enterprise Server 15-SP3

SUSE Linux Enterprise Server for SAP Applications 15-SP3

SUSE Linux Enterprise Workstation Extension 15-SP3

SUSE Manager Proxy 4.2

SUSE Manager Server 4.2

https://www.suse.com/security/cve/CVE-2022-26485.html

https://www.suse.com/security/cve/CVE-2022-26486.html

https://bugzilla.suse.com/1196809

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:0804-1
Rating: important

Topics%20covered

Topics Covered

security advisory important SUSE Linux Mozilla Thunderbird use-after-free patch instructions

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here