Bug 31210 - Thunderbird 102.5.1
Summary: Thunderbird 102.5.1
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA8-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2022-12-01 15:06 CET by David Walser
Modified: 2022-12-07 00:34 CET (History)
5 users (show)

See Also:
Source RPM: thunderbird, thunderbird-l10n
CVE:
Status comment:


Attachments

Description David Walser 2022-12-01 15:06:06 CET
Mozilla has released Thunderbird 102.5.1 today (December 1):
https://www.thunderbird.net/en-US/thunderbird/102.5.1/releasenotes/

Security issues fixed:
https://www.mozilla.org/en-US/security/advisories/mfsa2022-50/
Comment 1 Nicolas Salguero 2022-12-01 17:01:51 CET
Suggested advisory:
========================

The updated packages fix a security vulnerability:

Quoting from an HTML email with certain tags will trigger network requests and load remote content, regardless of a configuration to block remote content. (CVE-2022-45414)

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45414
https://www.thunderbird.net/en-US/thunderbird/102.5.1/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-50/
========================

Updated packages in core/updates_testing:
========================
thunderbird-102.5.1-1.mga8
thunderbird-ka-102.5.1-1.mga8
thunderbird-ru-102.5.1-1.mga8
thunderbird-uk-102.5.1-1.mga8
thunderbird-el-102.5.1-1.mga8
thunderbird-ja-102.5.1-1.mga8
thunderbird-zh_TW-102.5.1-1.mga8
thunderbird-kk-102.5.1-1.mga8
thunderbird-th-102.5.1-1.mga8
thunderbird-sk-102.5.1-1.mga8
thunderbird-vi-102.5.1-1.mga8
thunderbird-hu-102.5.1-1.mga8
thunderbird-zh_CN-102.5.1-1.mga8
thunderbird-cs-102.5.1-1.mga8
thunderbird-hsb-102.5.1-1.mga8
thunderbird-dsb-102.5.1-1.mga8
thunderbird-hy_AM-102.5.1-1.mga8
thunderbird-sr-102.5.1-1.mga8
thunderbird-es_MX-102.5.1-1.mga8
thunderbird-fr-102.5.1-1.mga8
thunderbird-de-102.5.1-1.mga8
thunderbird-tr-102.5.1-1.mga8
thunderbird-es_AR-102.5.1-1.mga8
thunderbird-pl-102.5.1-1.mga8
thunderbird-ko-102.5.1-1.mga8
thunderbird-kab-102.5.1-1.mga8
thunderbird-fy_NL-102.5.1-1.mga8
thunderbird-sq-102.5.1-1.mga8
thunderbird-pt_BR-102.5.1-1.mga8
thunderbird-cy-102.5.1-1.mga8
thunderbird-bg-102.5.1-1.mga8
thunderbird-sv_SE-102.5.1-1.mga8
thunderbird-be-102.5.1-1.mga8
thunderbird-sl-102.5.1-1.mga8
thunderbird-is-102.5.1-1.mga8
thunderbird-nl-102.5.1-1.mga8
thunderbird-lt-102.5.1-1.mga8
thunderbird-eu-102.5.1-1.mga8
thunderbird-et-102.5.1-1.mga8
thunderbird-da-102.5.1-1.mga8
thunderbird-fi-102.5.1-1.mga8
thunderbird-gl-102.5.1-1.mga8
thunderbird-pt_PT-102.5.1-1.mga8
thunderbird-he-102.5.1-1.mga8
thunderbird-hr-102.5.1-1.mga8
thunderbird-ro-102.5.1-1.mga8
thunderbird-ar-102.5.1-1.mga8
thunderbird-nn_NO-102.5.1-1.mga8
thunderbird-es_ES-102.5.1-1.mga8
thunderbird-en_GB-102.5.1-1.mga8
thunderbird-nb_NO-102.5.1-1.mga8
thunderbird-en_CA-102.5.1-1.mga8
thunderbird-pa_IN-102.5.1-1.mga8
thunderbird-en_US-102.5.1-1.mga8
thunderbird-ca-102.5.1-1.mga8
thunderbird-id-102.5.1-1.mga8
thunderbird-gd-102.5.1-1.mga8
thunderbird-it-102.5.1-1.mga8
thunderbird-lv-102.5.1-1.mga8
thunderbird-br-102.5.1-1.mga8
thunderbird-ga_IE-102.5.1-1.mga8
thunderbird-af-102.5.1-1.mga8
thunderbird-ms-102.5.1-1.mga8
thunderbird-ast-102.5.1-1.mga8
thunderbird-uz-102.5.1-1.mga8

from SRPMS:
thunderbird-102.5.1-1.mga8.src.rpm
thunderbird-l10n-102.5.1-1.mga8.src.rpm

Assignee: nicolas.salguero => qa-bugs
Source RPM: thunderbird => thunderbird, thunderbird-l10n
CC: (none) => nicolas.salguero
Status: NEW => ASSIGNED

Comment 2 Guillaume Royer 2022-12-02 15:25:38 CET
MGA8 64 XFCE Intel core I5 6Go RAM.

Updated with QA repo and RPMS:

thunderbird                    102.5.1      1.mga8        x86_64  
thunderbird-fr                 102.5.1      1.mga8        noarch 

No issues after installation.
Send and receive mail in SSL/TLS Ok
Calendar and contact sync ok

CC: (none) => guillaume.royer

Comment 3 Morgan Leijström 2022-12-03 22:33:36 CET
mga8-64, Plasma, nvidia-current, old i7
Been using it occasionally since yesterday

- Swedish localisation OK
- settings and mails kept
- IMAP
- SMTP
- printing

CC: (none) => fri

Comment 4 Dave Hodgins 2022-12-04 19:59:32 CET
Working ok for pop3 and imap email, rss, and usenet.
Advisory committed to svn.
Validating.

Keywords: (none) => advisory, validated_update
Whiteboard: (none) => MGA8-64-OK
CC: (none) => davidwhodgins, sysadmin-bugs

Comment 5 Mageia Robot 2022-12-07 00:34:33 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2022-0452.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.