Red Hat Security Advisory

RHSA-2017:3372

thunderbird security update

Released 2017-12-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) thunderbird-52.5.0-1.el7_4
Red Hat Enterprise Linux Desktop (v. 6) thunderbird-52.5.0-1.el6_9
Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-52.5.0-1.el6_9
Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-52.5.0-1.el7_4
Red Hat Enterprise Linux Workstation (v. 6) thunderbird-52.5.0-1.el6_9
Red Hat Enterprise Linux Workstation (v. 7) thunderbird-52.5.0-1.el7_4
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) thunderbird-52.5.0-1.el7_4

TI-2017-05445 CVE-2017-7828 · GHSA-f749-pqmw-rvhp

MEDIUM 52

A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in use.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.072 Published 2018-06-11 Fixed in 57, 52.5 CWE-416

TI-2017-05443 CVE-2017-7826 · GHSA-9g7r-5p3c-g4qg

MEDIUM 48

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03335 Published 2018-06-11 Fixed in 57, 52.5 CWE-119

TI-2017-05447 CVE-2017-7830 · GHSA-6j6p-p8wc-9jpp

LOW 33

The Resource Timing API incorrectly revealed navigations in cross-origin iframes.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02404 Published 2018-06-11 Fixed in 57, 52.5