[RHSA-2016:1985] thunderbird security update

Severity Important
Affected Packages 4
CVEs 1

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 45.4.0.

Security Fix(es):

  • Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2016-5257)

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Andrew McCreight, Dan Minor, Byron Campen, Jon Coppeard, Steve Fink, Tyson Smith, Philipp and Carsten Book as the original reporters.

Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/redhat/thunderbird?arch=x86_64&distro=redhat-6.8 redhat thunderbird < 45.4.0-1.el6_8 redhat-6.8 x86_64
Affected pkg:rpm/redhat/thunderbird?arch=s390x&distro=redhat-6.8 redhat thunderbird < 45.4.0-1.el6_8 redhat-6.8 s390x
Affected pkg:rpm/redhat/thunderbird?arch=ppc64&distro=redhat-6.8 redhat thunderbird < 45.4.0-1.el6_8 redhat-6.8 ppc64
Affected pkg:rpm/redhat/thunderbird?arch=i686&distro=redhat-6.8 redhat thunderbird < 45.4.0-1.el6_8 redhat-6.8 i686
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...