[ALSA-2023:6194] Important: thunderbird security update
Type:
security
Severity:
important
Release date:
2023-11-10
Description:
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.4.1. Security Fix(es): * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721) * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488) * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724) * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725) * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728) * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 thunderbird-115.4.1-1.el8_8.alma.1.aarch64.rpm 88dc1b156cd0e8b5d446f0ae6ae113ca9f89a4439b441cff312f308163890329
ppc64le thunderbird-115.4.1-1.el8_8.alma.1.ppc64le.rpm 7f2b82a52098221dcd985712be7f55817f5df271aadd820aeeff99bb10361b8b
s390x thunderbird-115.4.1-1.el8_8.alma.1.s390x.rpm d086d17ae54e5d4e25a3ac01f3a5680385d1c7070e1fcff22a4f7fdcb7d375a1
x86_64 thunderbird-115.4.1-1.el8_8.alma.1.x86_64.rpm 9cf86f6fe15bd19f9e012fe50f53b523636d7a890211563632227e7c08ec64ae
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.