Debian Bug report logs -
#1007176
rust-regex: CVE-2022-24713: RUSTSEC-2022-0013: Regexes with large repetitions on empty sub-expressions take a very long time to parse
Package:
src:rust-regex;
Maintainer for src:rust-regex is Debian Rust Maintainers <pkg-rust-maintainers@alioth-listsdebiannet>;
Reported by: Salvatore Bonacc ...
Firefox could be made to crash or run programs as your login if it
opened a malicious website ...
Multiple security issues were discovered in Thunderbird, which could
result in denial of service or the execution of arbitrary code
For the oldstable distribution (buster), these problems have been fixed
in version 1:9180-1~deb10u1
For the stable distribution (bullseye), these problems have been fixed in
version 1:9180-1~deb11u1
We recommend ...
Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code, information disclosure or spoofing
For the oldstable distribution (buster), these problems have been fixed
in version 9180esr-1~deb10u1
For the stable distribution (bullseye), these problems have been f ...
Synopsis
Important: thunderbird security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 84 Extended Update SupportRed Hat Product Security ...
Synopsis
Important: thunderbird security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsRed Hat Product ...
Synopsis
Important: thunderbird security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as h ...
Synopsis
Important: thunderbird security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as h ...
Synopsis
Important: firefox security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a ...
Synopsis
Important: firefox security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for firefox is now available for Red Hat Enterprise Linux 82 Extended Update SupportRed Hat Product Security has rate ...
Synopsis
Important: firefox security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for firefox is now available for Red Hat Enterprise Linux 84 Extended Update SupportRed Hat Product Security has rate ...
Synopsis
Important: firefox security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for firefox is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a ...
Synopsis
Important: firefox security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for firefox is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsRed Hat Product Securit ...
Synopsis
Important: thunderbird security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 82 Extended Update SupportRed Hat Product Security ...
The Mozilla Foundation Security Advisory describes this flaw as:
NSSToken objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash (CVE-2022-1097)
The Mozilla Foundation Security Advisory describes this flaw as:
After a VR Process is ...
regex is an implementation of regular expressions for the Rust language The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes Those (tunable) mitigations already provide sane defaults to prevent attacks This guarantee is documented and it's co ...
The rust regex crate did not properly prevent crafted regular expressions from taking an arbitrary amount of time during parsing If an attacker was able to supply input to this crate, they could have caused a denial of service in the browser ...
Mozilla Foundation Security Advisory 2022-15
Security Vulnerabilities fixed in Thunderbird 918
Announced
April 5, 2022
Impact
high
Products
Thunderbird
Fixed in
Thunderbird 918
...
Mozilla Foundation Security Advisory 2022-13
Security Vulnerabilities fixed in Firefox 99
Announced
April 5, 2022
Impact
high
Products
Firefox
Fixed in
Firefox 99
...
Mozilla Foundation Security Advisory 2022-14
Security Vulnerabilities fixed in Firefox ESR 918
Announced
April 5, 2022
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 918
...
Vulmon