Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package patchinfo.16000 for 
openSUSE:Leap:15.2:Update checked in at 2021-03-30 14:59:03
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.2:Update/patchinfo.16000 (Old)
 and      /work/SRC/openSUSE:Leap:15.2:Update/.patchinfo.16000.new.2401 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "patchinfo.16000"

Tue Mar 30 14:59:03 2021 rev:1 rq:882071 version:unknown

Changes:
--------
New Changes file:

NO CHANGES FILE!!!

New:
----
  _patchinfo

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ _patchinfo ++++++
<patchinfo incident="16000">
  <issue tracker="bnc" id="1183942">VUL-0: 
CVE-2021-23981,CVE-2021-23982,CVE-2021-23984, CVE-2021-23987: 
MozillaFirefox,MozillaThunderbird: update to 87 and 78.9.0esr</issue>
  <issue tracker="cve" id="2021-23984"/>
  <issue tracker="cve" id="2021-23987"/>
  <issue tracker="cve" id="2021-23981"/>
  <issue tracker="cve" id="2021-23982"/>
  <packager>MSirringhaus</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for MozillaFirefox</summary>
  <description>This update for MozillaFirefox fixes the following issues:

- Firefox was updated to 78.9.0 ESR  (MFSA 2021-11, bsc#1183942)
  * CVE-2021-23981: Texture upload into an unbound backing buffer resulted in 
an out-of-bound read
  * CVE-2021-23982: Internal network hosts could have been probed by a 
malicious webpage
  * CVE-2021-23984: Malicious extensions could have spoofed popup information
  * CVE-2021-23987: Memory safety bugs

This update was imported from the SUSE:SLE-15-SP2:Update update 
project.</description>
</patchinfo>

Reply via email to