Description:
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.4.0.
Security Fix(es):
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators (CVE-2022-39249)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a device verification attack (CVE-2022-39250)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack (CVE-2022-39251)
* Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927)
* Mozilla: Memory Corruption in JS Engine (CVE-2022-42928)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue (CVE-2022-39236)
* Mozilla: Denial of Service via window.print (CVE-2022-42929)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4 (CVE-2022-42932)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture |
Package |
Checksum |
aarch64 |
thunderbird-102.4.0-1.el9_0.alma.aarch64.rpm |
0efd788faa221cafe1b1849b65c451fffe80fb91a83defd9959fa01d93e9727a |
ppc64le |
thunderbird-102.4.0-1.el9_0.alma.ppc64le.rpm |
65ebd5ecd877aa27d53ea9042e6cf992fa0b1e66f2150258f68f531b9bb1c6d8 |
s390x |
thunderbird-102.4.0-1.el9_0.alma.s390x.rpm |
3c403c39757473cef161471688eb770324cb292320a1bda31b4ddc39c00b2103 |
x86_64 |
thunderbird-102.4.0-1.el9_0.alma.x86_64.rpm |
4cb4dbd7f2077edd580257791e7d23c06bdc1324f022611280d48a665aa5c968 |