Mageia alert MGASA-2015-0284 (thunderbird)
| From: | Mageia Updates <buildsystem-daemon@mageia.org> | |
| To: | updates-announce@ml.mageia.org | |
| Subject: | [updates-announce] MGASA-2015-0284: Updated thunderbird package fixes security vulnerabilities | |
| Date: | Mon, 27 Jul 2015 19:18:31 +0200 | |
| Message-ID: | <20150727171832.1DDD741163@valstar.mageia.org> |
MGASA-2015-0284 - Updated thunderbird package fixes security vulnerabilities Publication date: 27 Jul 2015 URL: http://advisories.mageia.org/MGASA-2015-0284.html Type: security Affected Mageia releases: 4, 5 CVE: CVE-2015-2724, CVE-2015-2734, CVE-2015-2735, CVE-2015-2736, CVE-2015-2737, CVE-2015-2738, CVE-2015-2739, CVE-2015-2740 Description: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird (CVE-2015-2724, CVE-2015-2734, CVE-2015-2735, CVE-2015-2736, CVE-2015-2737, CVE-2015-2738, CVE-2015-2739, CVE-2015-2740). References: - https://bugs.mageia.org/show_bug.cgi?id=16285 - https://www.mozilla.org/en-US/security/advisories/mfsa201... - https://www.mozilla.org/en-US/security/advisories/mfsa201... - https://www.mozilla.org/en-US/security/known-vulnerabilit... - https://rhn.redhat.com/errata/RHSA-2015-1455.html - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2724 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2734 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2735 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2736 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2737 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2738 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2739 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2740 SRPMS: - 4/core/thunderbird-38.1.0-1.mga4 - 4/core/thunderbird-l10n-38.1.0-1.mga4 - 5/core/thunderbird-38.1.0-1.mga5 - 5/core/thunderbird-l10n-38.1.0-1.mga5