Red Hat Security AdvisoryRHSA-2023:1401
thunderbird security update
Released 2023-03-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) thunderbird-102.9.0-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-102.9.0-1.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) thunderbird-102.9.0-1.el7_9
Fixes 5 records
Priority HIGH 73
While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00702 · Published 2023-06-02 · Partial fix · 111, 102.9 CWE-843
Priority MEDIUM 62
Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00347 · Published 2023-06-02 · Partial fix · 111, 102.9 CWE-346
Priority MEDIUM 62
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0069 · Published 2023-06-02 · Partial fix · 111, 102.9
Priority MEDIUM 41
Memory safety bugs present in Firefox 110 and Firefox ESR 102.8.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00719 · Published 2023-06-02 · Partial fix · 111, 102.9 CWE-787
Priority LOW 30
When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0061 · Published 2023-06-02 · Partial fix · 111, 102.9