[ALSA-2022:7178] Important: thunderbird security update
Type:
security
Severity:
important
Release date:
2022-10-26
Description:
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.4.0. Security Fix(es): * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators (CVE-2022-39249) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a device verification attack (CVE-2022-39250) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack (CVE-2022-39251) * Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927) * Mozilla: Memory Corruption in JS Engine (CVE-2022-42928) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue (CVE-2022-39236) * Mozilla: Denial of Service via window.print (CVE-2022-42929) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4 (CVE-2022-42932) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 thunderbird-102.4.0-1.el9_0.alma.aarch64.rpm 0efd788faa221cafe1b1849b65c451fffe80fb91a83defd9959fa01d93e9727a
ppc64le thunderbird-102.4.0-1.el9_0.alma.ppc64le.rpm 65ebd5ecd877aa27d53ea9042e6cf992fa0b1e66f2150258f68f531b9bb1c6d8
s390x thunderbird-102.4.0-1.el9_0.alma.s390x.rpm 3c403c39757473cef161471688eb770324cb292320a1bda31b4ddc39c00b2103
x86_64 thunderbird-102.4.0-1.el9_0.alma.x86_64.rpm 4cb4dbd7f2077edd580257791e7d23c06bdc1324f022611280d48a665aa5c968
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.