Summary
[45.8.0-1.0.1]
- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js
[45.8.0-1]
- Update to 45.8.0
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | thunderbird | 0:45.8.0-1.0.1.el7_3 |
Vulnerabilities 9
-
Unscored —
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we pr…
-
Unscored —
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potent…
-
Unscored —
A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The res…
-
Unscored —
A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroy…
-
Unscored —
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree an…
-
Unscored —
Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. Th…
-
Unscored —
Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract p…
-
Unscored —
Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-…
-
Unscored —
Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in ho…