Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

Duplicate security issues in MFSA-2018-19 and MFSA-2018-18?

  • 1 回覆
  • 1 有這個問題
  • 1 次檢視
  • 最近回覆由 Matt

ebull
ebull
more options

The following CVEs are present in MFSA-2018-19 as fixed in Thunderbird 60, but also in MFSA-2018-18 as fixed in 52.9. There don't seem to be any versions in between 52.9 and 60. Were the fixes in 52.9 incomplete and require an update to 60 to mitigate, or were the entries in MFSA-2018-19 incorrect?

CVE-2018-12359 CVE-2018-12360 CVE-2018-12362 CVE-2018-12363 CVE-2018-12364 CVE-2018-12365 CVE-2018-12366 CVE-2018-12368 CVE-2018-5188

The following CVEs are present in MFSA-2018-19 as fixed in Thunderbird 60, but also in MFSA-2018-18 as fixed in 52.9. There don't seem to be any versions in between 52.9 and 60. Were the fixes in 52.9 incomplete and require an update to 60 to mitigate, or were the entries in MFSA-2018-19 incorrect? CVE-2018-12359 CVE-2018-12360 CVE-2018-12362 CVE-2018-12363 CVE-2018-12364 CVE-2018-12365 CVE-2018-12366 CVE-2018-12368 CVE-2018-5188

所有回覆 (1)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

Given the two versions are both supported at the moment, I would guess both channels will have been updated. That is usually what happens.

52 being an ESR release and 60 not being released for update till next week.