AVG-2713 - log back

AVG-2713 edited at 14 May 2022 20:53:43
Severity
- Unknown
+ High
AVG-2713 created at 14 May 2022 20:52:47
Packages
+ thunderbird
Issues
+ CVE-2022-26381
+ CVE-2022-26383
+ CVE-2022-26384
+ CVE-2022-26386
+ CVE-2022-26387
Status
+ Fixed
Severity
+ Unknown
Affected
+ 91.6.2-1
Fixed
+ 91.7.0-1
Ticket
Advisory qualified
+ No
References
+ https://www.mozilla.org/en-US/security/advisories/mfsa2022-12/
Notes
+ "In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts."