Security update for MozillaThunderbird SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2018:0257-1 Final 1 1 2018-01-27T21:50:06Z current 2018-01-27T21:50:06Z 2018-01-27T21:50:06Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for MozillaThunderbird This update for MozillaThunderbird to version 52.6 fixes several issues. These security issues were fixed: - CVE-2018-5095: Integer overflow in Skia library during edge builder allocation (bsc#1077291). - CVE-2018-5096: Use-after-free while editing form elements (bsc#1077291). - CVE-2018-5097: Use-after-free when source document is manipulated during XSLT (bsc#1077291). - CVE-2018-5098: Use-after-free while manipulating form input elements (bsc#1077291). - CVE-2018-5099: Use-after-free with widget listener (bsc#1077291). - CVE-2018-5102: Use-after-free in HTML media elements (bsc#1077291). - CVE-2018-5103: Use-after-free during mouse event handling (bsc#1077291). - CVE-2018-5104: Use-after-free during font face manipulation (bsc#1077291). - CVE-2018-5117: URL spoofing with right-to-left text aligned left-to-right (bsc#1077291). - CVE-2018-5089: Various memory safety bugs (bsc#1077291). These security issues were fixed: - Searching message bodies of messages in local folders, including filter and quick filter operations, not working reliably: Content not found in base64-encode message parts, non-ASCII text not found and false positives found. - Defective messages (without at least one expected header) not shown in IMAP folders but shown on mobile devices - Calendar: Unintended task deletion if numlock is enabled The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2018-101 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ E-Mail link for openSUSE-SU-2018:0257-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1077291 SUSE Bug 1077291 https://www.suse.com/security/cve/CVE-2018-5089/ SUSE CVE CVE-2018-5089 page https://www.suse.com/security/cve/CVE-2018-5095/ SUSE CVE CVE-2018-5095 page https://www.suse.com/security/cve/CVE-2018-5096/ SUSE CVE CVE-2018-5096 page https://www.suse.com/security/cve/CVE-2018-5097/ SUSE CVE CVE-2018-5097 page https://www.suse.com/security/cve/CVE-2018-5098/ SUSE CVE CVE-2018-5098 page https://www.suse.com/security/cve/CVE-2018-5099/ SUSE CVE CVE-2018-5099 page https://www.suse.com/security/cve/CVE-2018-5102/ SUSE CVE CVE-2018-5102 page https://www.suse.com/security/cve/CVE-2018-5103/ SUSE CVE CVE-2018-5103 page https://www.suse.com/security/cve/CVE-2018-5104/ SUSE CVE CVE-2018-5104 page https://www.suse.com/security/cve/CVE-2018-5117/ SUSE CVE CVE-2018-5117 page SUSE Package Hub 12 MozillaThunderbird-52.6-54.1 MozillaThunderbird-buildsymbols-52.6-54.1 MozillaThunderbird-devel-52.6-54.1 MozillaThunderbird-translations-common-52.6-54.1 MozillaThunderbird-translations-other-52.6-54.1 MozillaThunderbird-52.6-54.1 as a component of SUSE Package Hub 12 MozillaThunderbird-buildsymbols-52.6-54.1 as a component of SUSE Package Hub 12 MozillaThunderbird-devel-52.6-54.1 as a component of SUSE Package Hub 12 MozillaThunderbird-translations-common-52.6-54.1 as a component of SUSE Package Hub 12 MozillaThunderbird-translations-other-52.6-54.1 as a component of SUSE Package Hub 12 Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5089 SUSE Package Hub 12:MozillaThunderbird-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-devel-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-common-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-other-52.6-54.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ https://www.suse.com/security/cve/CVE-2018-5089.html CVE-2018-5089 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5095 SUSE Package Hub 12:MozillaThunderbird-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-devel-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-common-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-other-52.6-54.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ https://www.suse.com/security/cve/CVE-2018-5095.html CVE-2018-5095 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Thunderbird < 52.6. CVE-2018-5096 SUSE Package Hub 12:MozillaThunderbird-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-devel-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-common-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-other-52.6-54.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ https://www.suse.com/security/cve/CVE-2018-5096.html CVE-2018-5096 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5097 SUSE Package Hub 12:MozillaThunderbird-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-devel-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-common-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-other-52.6-54.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ https://www.suse.com/security/cve/CVE-2018-5097.html CVE-2018-5097 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5098 SUSE Package Hub 12:MozillaThunderbird-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-devel-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-common-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-other-52.6-54.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ https://www.suse.com/security/cve/CVE-2018-5098.html CVE-2018-5098 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are used. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5099 SUSE Package Hub 12:MozillaThunderbird-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-devel-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-common-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-other-52.6-54.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ https://www.suse.com/security/cve/CVE-2018-5099.html CVE-2018-5099 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5102 SUSE Package Hub 12:MozillaThunderbird-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-devel-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-common-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-other-52.6-54.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ https://www.suse.com/security/cve/CVE-2018-5102.html CVE-2018-5102 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5103 SUSE Package Hub 12:MozillaThunderbird-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-devel-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-common-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-other-52.6-54.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ https://www.suse.com/security/cve/CVE-2018-5103.html CVE-2018-5103 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5104 SUSE Package Hub 12:MozillaThunderbird-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-devel-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-common-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-other-52.6-54.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ https://www.suse.com/security/cve/CVE-2018-5104.html CVE-2018-5104 https://bugzilla.suse.com/1077291 SUSE Bug 1077291 If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different site than the one loaded. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. CVE-2018-5117 SUSE Package Hub 12:MozillaThunderbird-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-devel-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-common-52.6-54.1 SUSE Package Hub 12:MozillaThunderbird-translations-other-52.6-54.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ https://www.suse.com/security/cve/CVE-2018-5117.html CVE-2018-5117 https://bugzilla.suse.com/1077291 SUSE Bug 1077291