Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 872572 (CVE-2022-3155)

Summary: <mail-client/thunderbird{-bin,}-102.3.0: multiple vulnerabilities
Product: Gentoo Security Reporter: John Helmert III <ajak>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED FIXED    
Severity: major CC: mozilla
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: A2 [glsa+]
Package list:
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 872569    

Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-09-23 21:24:12 UTC
Details in: https://www.mozilla.org/en-US/security/advisories/mfsa2022-42/
Comment 1 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-09-23 21:24:54 UTC
Thanks for bumps! Please stabilize when ready.
Comment 2 Joonas Niilola gentoo-dev 2022-09-25 06:44:55 UTC
I also added 91.13.1 for those who wish to stay on 91 due to incompatible addons and such (#869098) and overall for people who are still unhappy with 102. I doubt upstream will support 91 anymore, but they just might...
https://www.thunderbird.net/en-US/thunderbird/91.13.1/releasenotes/

I don't know about the state of security vulnerabilities in 91.13.1 compared to 102.3.0.
Comment 3 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-09-26 14:12:54 UTC
GLSA request filed
Comment 4 Larry the Git Cow gentoo-dev 2022-09-29 14:48:50 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=635e035be6bf710dbaec2e38ee1b368ee26be4c2

commit 635e035be6bf710dbaec2e38ee1b368ee26be4c2
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2022-09-29 14:22:02 +0000
Commit:     John Helmert III <ajak@gentoo.org>
CommitDate: 2022-09-29 14:48:00 +0000

    [ GLSA 202209-18 ] Mozilla Thunderbird: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/872572
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: John Helmert III <ajak@gentoo.org>

 glsa-202209-18.xml | 59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 59 insertions(+)
Comment 5 Larry the Git Cow gentoo-dev 2022-10-25 14:10:17 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5afdd241d0a30c3dea5fc284878b0451613d6fe6

commit 5afdd241d0a30c3dea5fc284878b0451613d6fe6
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2022-10-25 14:08:20 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2022-10-25 14:10:13 +0000

    mail-client/thunderbird: security cleanup, drop 91.13.1, 102.3.*
    
    Bug: https://bugs.gentoo.org/873667
    Bug: https://bugs.gentoo.org/872572
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 mail-client/thunderbird/Manifest                   |  260 -----
 mail-client/thunderbird/thunderbird-102.3.1.ebuild | 1164 -------------------
 mail-client/thunderbird/thunderbird-102.3.2.ebuild | 1165 --------------------
 mail-client/thunderbird/thunderbird-102.3.3.ebuild | 1165 --------------------
 mail-client/thunderbird/thunderbird-91.13.1.ebuild | 1131 -------------------
 5 files changed, 4885 deletions(-)
Comment 6 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-10-25 21:49:35 UTC
All done!