Upstream information

CVE-2017-7829 at MITRE

Description

It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having low severity.

SUSE Bugzilla entries: 1071236 [RESOLVED / DUPLICATE], 1074046 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Workstation Extension 15
  • MozillaThunderbird >= 52.8-1.2
  • MozillaThunderbird-devel >= 52.8-1.2
  • MozillaThunderbird-translations-common >= 52.8-1.2
  • MozillaThunderbird-translations-other >= 52.8-1.2
Patchnames:
SUSE Linux Enterprise Workstation Extension 15 GA MozillaThunderbird
SUSE Package Hub for SUSE Linux Enterprise 12
  • MozillaThunderbird >= 52.5.2-51.1
  • MozillaThunderbird-buildsymbols >= 52.5.2-51.1
  • MozillaThunderbird-debuginfo >= 52.5.2-51.1
  • MozillaThunderbird-debugsource >= 52.5.2-51.1
  • MozillaThunderbird-devel >= 52.5.2-51.1
  • MozillaThunderbird-translations-common >= 52.5.2-51.1
  • MozillaThunderbird-translations-other >= 52.5.2-51.1
Patchnames:
openSUSE-2017-1419
openSUSE Leap 15.0
  • MozillaThunderbird >= 52.7-lp150.2.16
  • MozillaThunderbird-translations-common >= 52.7-lp150.2.16
  • MozillaThunderbird-translations-other >= 52.7-lp150.2.16
Patchnames:
openSUSE Leap 15.0 GA MozillaThunderbird
openSUSE Leap 42.2
  • MozillaThunderbird >= 52.5.2-41.24.1
  • MozillaThunderbird-buildsymbols >= 52.5.2-41.24.1
  • MozillaThunderbird-debuginfo >= 52.5.2-41.24.1
  • MozillaThunderbird-debugsource >= 52.5.2-41.24.1
  • MozillaThunderbird-devel >= 52.5.2-41.24.1
  • MozillaThunderbird-translations-common >= 52.5.2-41.24.1
  • MozillaThunderbird-translations-other >= 52.5.2-41.24.1
Patchnames:
openSUSE-2017-1419
openSUSE Leap 42.3
  • MozillaThunderbird >= 52.5.2-53.1
  • MozillaThunderbird-buildsymbols >= 52.5.2-53.1
  • MozillaThunderbird-debuginfo >= 52.5.2-53.1
  • MozillaThunderbird-debugsource >= 52.5.2-53.1
  • MozillaThunderbird-devel >= 52.5.2-53.1
  • MozillaThunderbird-translations-common >= 52.5.2-53.1
  • MozillaThunderbird-translations-other >= 52.5.2-53.1
Patchnames:
openSUSE-2017-1419