Thunderbird advisory editorial fix-ups

Fix wrong title in mfsa2024-28 Add the description to mfsa2024-28 and -20
mozilla · Jun 21, 2024 · e94c134 · e94c134
1 parent 3e5803a
commit e94c134
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/announce/2024/mfsa2024-20.yml b/announce/2024/mfsa2024-20.yml
@@ -4,6 +4,8 @@ impact: high
 fixed_in:
 - Thunderbird 115.10
 title: Security Vulnerabilities fixed in Thunderbird 115.10
+description: |
+  *In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts.*
 advisories:
   CVE-2024-3852:
     title: GetBoundName in the JIT returned the wrong object

diff --git a/announce/2024/mfsa2024-28.yml b/announce/2024/mfsa2024-28.yml
@@ -3,7 +3,9 @@ announced: June 13, 2024
 impact: high
 fixed_in:
 - Thunderbird 115.12
-title: Security Vulnerabilities fixed in Firefox ESR 115.12
+title: Security Vulnerabilities fixed in Thunderbird 115.12
+description: |
+  *In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts.*
 advisories:
   CVE-2024-5702:
     title: Use-after-free in networking