[ALSA-2022:7190] Important: thunderbird security update
Type:
security
Severity:
important
Release date:
2022-11-20
Description:
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.4.0. Security Fix(es): * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators (CVE-2022-39249) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a device verification attack (CVE-2022-39250) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack (CVE-2022-39251) * Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927) * Mozilla: Memory Corruption in JS Engine (CVE-2022-42928) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue (CVE-2022-39236) * Mozilla: Denial of Service via window.print (CVE-2022-42929) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4 (CVE-2022-42932) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 thunderbird-102.4.0-1.el8_6.alma.aarch64.rpm dd569ea72fd25857ea9c65878f3990e3922a2b14445ae5ee678b7c236ff02ab2
aarch64 thunderbird-102.4.0-1.el8_6.alma.plus.1.aarch64.rpm e31522cde1328a9813ce01b257c6a4f9192c71f2eed63d6ecc76319e80165454
ppc64le thunderbird-102.4.0-1.el8_6.alma.ppc64le.rpm ae32f9a76dfc14532e5d289c2db17dcd9780fd7176f75e49951124ae692fe8ac
ppc64le thunderbird-102.4.0-1.el8_6.alma.plus.1.ppc64le.rpm b87789cf3e1f68f307a0227524e681d121d3762e881cb027302ee1ef2c75656c
s390x thunderbird-102.4.0-1.el8_6.alma.s390x.rpm 234a3100118b0fb8cb34ce66cd0392a42f29ea7dd0db53d384aeb8ce06a3612a
s390x thunderbird-102.4.0-1.el8_6.alma.plus.1.s390x.rpm dafe9a0c06c3ad353b6349f3ae7dacf603007382f8ef014d35ccf50c78c8e5f2
x86_64 thunderbird-102.4.0-1.el8_6.alma.x86_64.rpm ad461584747a38030ace18dcdf9a4c218e08471d94c4128583f652b4a25b2e7b
x86_64 thunderbird-102.4.0-1.el8_6.alma.plus.1.x86_64.rpm d4d1c168880069830fb2f78ca212a79b030dd8b2665f4ccbd387178d2c0640e2
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.