Red Hat Security Advisory

RHSA-2018:3532

thunderbird security update

Released 2018-11-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) thunderbird-60.3.0-1.el7_5
Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-60.3.0-1.el7_5
Red Hat Enterprise Linux Workstation (v. 7) thunderbird-60.3.0-1.el7_5
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) thunderbird-60.3.0-1.el7_5

Fixes 4 records

TI-2018-08892 CVE-2018-12392 · GHSA-328m-hvwm-m425

When manipulating user events in nested loops while opening a document through script, it…

MEDIUM 48

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03425 Published 2019-02-28 Fixed in 63, 60.3

TI-2018-08890 CVE-2018-12390 · GHSA-7vx2-3c54-4w62

Memory corruption in Mozilla Firefox

MEDIUM 48

Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03207 Published 2019-02-28 Fixed in 63, 60.3 CWE-119

TI-2018-08889 CVE-2018-12389 · GHSA-fhjm-pw82-9596

Memory corruption in Mozilla Firefox ESR

MEDIUM 43

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02346 Published 2019-02-28 Fixed in 60.3 CWE-119

TI-2018-08893 CVE-2018-12393 · GHSA-7372-3rg3-25vw

Integer overflow in Mozilla Firefox

MEDIUM 40

A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03924 Published 2019-02-28 Fixed in 63, 60.3 CWE-190