thunderbird - security update

Fixed packages 2

Vulnerabilities 7

• Unscored —
  CVE-2017-7826

  Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corru…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2017-7828

  A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been fre…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2017-7829

  It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The …

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2017-7830

  The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violatio…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2017-7846

  It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via "View -> Fee…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2017-7847

  Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affe…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2017-7848

  RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affect…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jun 11, 2018