[RHSA-2022:4887] thunderbird security update

Severity Important
Affected Packages 4
CVEs 8

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.10.0.

Security Fix(es):

  • Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email (CVE-2022-1834)

  • Mozilla: Cross-Origin resource's length leaked (CVE-2022-31736)

  • Mozilla: Heap buffer overflow in WebGL (CVE-2022-31737)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-31738)

  • Mozilla: Register allocation problem in WASM on arm64 (CVE-2022-31740)

  • Mozilla: Uninitialized variable leads to invalid memory read (CVE-2022-31741)

  • Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10 (CVE-2022-31747)

  • Mozilla: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information (CVE-2022-31742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/redhat/thunderbird?arch=x86_64&distro=redhat-8.6 redhat thunderbird < 91.10.0-1.el8_6 redhat-8.6 x86_64
Affected pkg:rpm/redhat/thunderbird?arch=s390x&distro=redhat-8.6 redhat thunderbird < 91.10.0-1.el8_6 redhat-8.6 s390x
Affected pkg:rpm/redhat/thunderbird?arch=ppc64le&distro=redhat-8.6 redhat thunderbird < 91.10.0-1.el8_6 redhat-8.6 ppc64le
Affected pkg:rpm/redhat/thunderbird?arch=aarch64&distro=redhat-8.6 redhat thunderbird < 91.10.0-1.el8_6 redhat-8.6 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...