High ELSA-2017-3372 3 CVEs

Important: thunderbird security update (Oracle Linux 7)

Published Dec 4, 2017 · Updated Dec 4, 2017

Ecosystem: Oracle Linux

Summary

[52.5.0-1.0.1]
- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

[52.5.0-1]
- Update to 52.5.0

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	thunderbird	0:52.5.0-1.0.1.el7_4

Vulnerabilities 3

Unscored —

CVE-2017-7826

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corru…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7828

A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been fre…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7830

The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violatio…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018