[ALSA-2023:3221] thunderbird security update

Severity Important

Affected Packages 2

CVEs 7

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.11.0.

Security Fix(es):

Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)
Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)
Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)
Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)
Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)
Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)
Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package	Affected Version
pkg:rpm/almalinux/thunderbird?arch=x86_64&distro=almalinux-8.7	< 102.11.0-1.el8_7.alma
pkg:rpm/almalinux/thunderbird?arch=aarch64&distro=almalinux-8.7	< 102.11.0-1.el8_7.alma

ID

ALSA-2023:3221

Severity

important

URL

https://errata.almalinux.org/ALSA-2023:3221.html

Published

2023-05-18T00:00:00
(16 months ago)

Modified

2023-05-19T22:00:14
(16 months ago)

Rights

Other Advisories

Source	# ID	URL
RHSA	RHSA-2023:3221	https://access.redhat.com/errata/RHSA-2023:3221
CVE	CVE-2023-32205	https://access.redhat.com/security/cve/CVE-2023-32205
CVE	CVE-2023-32206	https://access.redhat.com/security/cve/CVE-2023-32206
CVE	CVE-2023-32207	https://access.redhat.com/security/cve/CVE-2023-32207
CVE	CVE-2023-32211	https://access.redhat.com/security/cve/CVE-2023-32211
CVE	CVE-2023-32212	https://access.redhat.com/security/cve/CVE-2023-32212
CVE	CVE-2023-32213	https://access.redhat.com/security/cve/CVE-2023-32213
CVE	CVE-2023-32215	https://access.redhat.com/security/cve/CVE-2023-32215
Bugzilla	2196736	https://bugzilla.redhat.com/2196736
Bugzilla	2196737	https://bugzilla.redhat.com/2196737
Bugzilla	2196738	https://bugzilla.redhat.com/2196738
Bugzilla	2196740	https://bugzilla.redhat.com/2196740
Bugzilla	2196741	https://bugzilla.redhat.com/2196741
Bugzilla	2196742	https://bugzilla.redhat.com/2196742
Bugzilla	2196753	https://bugzilla.redhat.com/2196753
Self	ALSA-2023:3221	https://errata.almalinux.org/8/ALSA-2023-3221.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:rpm/almalinux/thunderbird?arch=x86_64&distro=almalinux-8.7	almalinux	thunderbird	< 102.11.0-1.el8_7.alma	almalinux-8.7	x86_64
Affected	pkg:rpm/almalinux/thunderbird?arch=aarch64&distro=almalinux-8.7	almalinux	thunderbird	< 102.11.0-1.el8_7.alma	almalinux-8.7	aarch64

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date