[ALSA-2023:3150] thunderbird security update
Severity
Important
Affected Packages
2
CVEs
7
thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.11.0.
Security Fix(es):
- Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)
- Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)
- Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)
- Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)
- Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)
- Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)
- Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Package | Affected Version |
---|---|
pkg:rpm/almalinux/thunderbird?arch=x86_64&distro=almalinux-9.2 | < 102.11.0-1.el9_2.alma |
pkg:rpm/almalinux/thunderbird?arch=aarch64&distro=almalinux-9.2 | < 102.11.0-1.el9_2.alma |
- ID
- ALSA-2023:3150
- Severity
- important
- URL
- https://errata.almalinux.org/ALSA-2023:3150.html
- Published
-
2023-05-16T00:00:00
(16 months ago) - Modified
-
2023-05-19T22:00:13
(16 months ago) - Rights
- Copyright 2023 AlmaLinux OS
- Other Advisories
-
- ALAS2-2023-2051
- ALPINE:CVE-2023-32205
- ALPINE:CVE-2023-32206
- ALPINE:CVE-2023-32207
- ALPINE:CVE-2023-32211
- ALPINE:CVE-2023-32212
- ALPINE:CVE-2023-32213
- ALPINE:CVE-2023-32215
- ALSA-2023:3143
- ALSA-2023:3220
- ALSA-2023:3221
- DSA-5400-1
- DSA-5403-1
- ELSA-2023-3137
- ELSA-2023-3143
- ELSA-2023-3150
- ELSA-2023-3151
- ELSA-2023-3220
- ELSA-2023-3221
- GLSA-202312-03
- GLSA-202401-10
- MFSA-2023-16
- MFSA-2023-17
- MFSA-2023-18
- RHSA-2023:3137
- RHSA-2023:3143
- RHSA-2023:3150
- RHSA-2023:3151
- RHSA-2023:3220
- RHSA-2023:3221
- RLSA-2023:3220
- RLSA-2023:3221
- SSA:2023-129-01
- SSA:2023-130-01
- SUSE-SU-2023:2173-1
- SUSE-SU-2023:2175-1
- SUSE-SU-2023:2176-1
- SUSE-SU-2023:2211-1
- USN-6074-1
- USN-6075-1
- USN-6120-1
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/almalinux/thunderbird?arch=x86_64&distro=almalinux-9.2 | almalinux | thunderbird | < 102.11.0-1.el9_2.alma | almalinux-9.2 | x86_64 | |
Affected | pkg:rpm/almalinux/thunderbird?arch=aarch64&distro=almalinux-9.2 | almalinux | thunderbird | < 102.11.0-1.el9_2.alma | almalinux-9.2 | aarch64 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |