1. Home
  2. Security Advisories
  3. Rocky Linux
  4. RLSA-2023:5428

[RLSA-2023:5428] thunderbird security update

Severity Important
Affected Packages 1
CVEs 5
Info Packages References Vulnerabilities

An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.3.1.

Security Fix(es):

  • firefox: use-after-free in workers (CVE-2023-3600)

  • Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169)

  • Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171)

  • Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176)

  • libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package Affected Version
pkg:rpm/rockylinux/thunderbird?arch=aarch64&distro=rockylinux-8.8 < 115.3.1-1.el8_8
ID
RLSA-2023:5428
Severity
important
URL
https://errata.rockylinux.org/RLSA-2023:5428
Published
2023-10-05T21:35:15
(11 months ago)
Modified
2023-10-05T21:36:53
(11 months ago)
Rights
Copyright 2024 Rocky Enterprise Software Foundation
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/rockylinux/thunderbird?arch=aarch64&distro=rockylinux-8.8 rockylinux thunderbird < 115.3.1-1.el8_8 rockylinux-8.8 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date