openSUSE-SU-2021:1091-1: important: Security update for MozillaThunderbird

openSUSE Security Update: Security update for MozillaThunderbird______________________________________________________________________________Announcement ID: openSUSE-SU-2021:1091-1Rating: importantReferences: #1188275 Cross-References: CVE-2021-29969 CVE-2021-29970 CVE-2021-29976 CVE-2021-30547CVSS scores: CVE-2021-29969 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-30547 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HAffected Products: openSUSE Leap 15.2______________________________________________________________________________ An update that fixes four vulnerabilities is now available.Description: This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 78.12 * fixed: Sending an email containing HTML links with spaces in the URL sometimes resulted in broken links * fixed: Folder Pane display theme fixes for macOS * fixed: Chat account settings did not always save as expected * fixed: RSS feed subscriptions sometimes lost * fixed: Calendar: A parsing error for alarm triggers of type “DURATION” caused sync problems for some users * fixed: Various security fixes MFSA 2021-30 (bsc#1188275) * CVE-2021-29969: IMAP server responses sent by a MITM prior to STARTTLS could be processed * CVE-2021-29970: Use-after-free in accessibility features of a document * CVE-2021-30547: Out of bounds write in ANGLE * CVE-2021-29976: Memory safety bugs fixed in Thunderbird 78.12 This update was imported from the SUSE:SLE-15-SP2:Update update project.Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or “zypper patch”. Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1091=1Package List: - openSUSE Leap 15.2 (x86_64): MozillaThunderbird-78.12.0-lp152.2.48.2 MozillaThunderbird-debuginfo-78.12.0-lp152.2.48.2 MozillaThunderbird-debugsource-78.12.0-lp152.2.48.2 MozillaThunderbird-translations-common-78.12.0-lp152.2.48.2 MozillaThunderbird-translations-other-78.12.0-lp152.2.48.2References: https://www.suse.com/security/cve/CVE-2021-29969.html https://www.suse.com/security/cve/CVE-2021-29970.html https://www.suse.com/security/cve/CVE-2021-29976.html https://www.suse.com/security/cve/CVE-2021-30547.html https://bugzilla.suse.com/1188275

More…