Red Hat Security AdvisoryRHSA-2015:1682
thunderbird security update
Released 2015-08-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) thunderbird-38.2.0-1.el7_1
- Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-38.2.0-4.el5_11, thunderbird-38.2.0-4.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) thunderbird-38.2.0-4.el6_7
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) thunderbird-38.2.0-4.el5_11, thunderbird-38.2.0-4.el5_11.i386
- Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-38.2.0-4.el6_7
- Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-38.2.0-1.ael7b_1, thunderbird-38.2.0-1.el7_1
- Red Hat Enterprise Linux Workstation (v. 6) thunderbird-38.2.0-4.el6_7
- Red Hat Enterprise Linux Workstation (v. 7) thunderbird-38.2.0-1.el7_1
Fixes 5 records
Priority MEDIUM 52
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06694 · Published 2015-08-16 · Fixed CWE-119
Priority MEDIUM 41
Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other produ…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.084 · Published 2015-08-16 · Fixed CWE-189
Priority LOW 39
Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03194 · Published 2015-08-16 · Fixed
Priority LOW 39
The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly hav…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03194 · Published 2015-08-16 · Fixed CWE-119
Priority LOW 38
The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified o…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03036 · Published 2015-08-16 · Fixed CWE-119