Skip to content
OpenAdvisories
High ELSA-2015-2519 7 CVEs

Important: thunderbird security update (Oracle Linux 7)

Published Nov 27, 2015 · Updated Nov 27, 2015

Ecosystem: Oracle Linux

Summary

[38.4.0-1.0.1.el6_7]
- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

[38.4.0-1]
- Update to 38.4.0

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 thunderbird 0:38.4.0-1.0.1.el7_2

Vulnerabilities 7

  • Unscored —
    CVE-2015-4513

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 3…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7189

    Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remot…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7193

    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7197

    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7198

    Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7199

    The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 an…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7200

    The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status che…

    thunderbird firefox Ubuntu