Mageia alert MGASA-2015-0330 (thunderbird)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2015-0330: Updated thunderbird packages fix security vulnerabilities 
Date:
    	     
 
Thu, 27 Aug 2015 22:50:20 +0200
Message-ID:
    	     
 
<20150827205020.DF31C42FD3@valstar.mageia.org>
MGASA-2015-0330 - Updated thunderbird packages fix security vulnerabilities

Publication date: 27 Aug 2015
URL: http://advisories.mageia.org/MGASA-2015-0330.html

Type: security
Affected Mageia releases: 4, 5
CVE: CVE-2015-4473,
     CVE-2015-4487,
     CVE-2015-4488,
     CVE-2015-4489,
     CVE-2015-4491

Description:
Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause Thunderbird to crash or,
potentially, execute arbitrary code with the privileges of the user running
Thunderbird (CVE-2015-4473, CVE-2015-4491, CVE-2015-4487, CVE-2015-4488,
CVE-2015-4489).

References:
- https://bugs.mageia.org/show_bug.cgi?id=16648

- https://www.mozilla.org/en-US/security/advisories/mfsa201...
- https://www.mozilla.org/en-US/security/advisories/mfsa201...
- https://www.mozilla.org/en-US/security/advisories/mfsa201...
- https://www.mozilla.org/en-US/security/known-vulnerabilit...
- https://rhn.redhat.com/errata/RHSA-2015-1682.html

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4473

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4487

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4488

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4489

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491


SRPMS:
- 4/core/thunderbird-38.2.0-1.mga4
- 4/core/thunderbird-l10n-38.2.0-1.mga4
- 5/core/thunderbird-38.2.0-1.mga5
- 5/core/thunderbird-l10n-38.2.0-1.mga5