High ELSA-2019-0160 6 CVEs

Important: thunderbird security update (Oracle Linux 7)

Published Jan 25, 2019 · Updated Jan 25, 2019

Ecosystem: Oracle Linux

Summary

[60.4.0-1.0.1]
- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

[60.4.0-1]
- Update to 60.4.0

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	thunderbird	0:60.4.0-1.0.1.el7_6

Vulnerabilities 6

Unscored —

CVE-2018-12405

Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some o…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Feb 28, 2019
Unscored —

CVE-2018-17466

Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out …

Google Chrome chromium-browser thunderbird Browsers Debian Ubuntu

Nov 14, 2018
Unscored —

CVE-2018-18492

A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select eleme…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Feb 28, 2019
Unscored —

CVE-2018-18493

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D a…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Feb 28, 2019
Unscored —

CVE-2018-18494

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location proper…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Feb 28, 2019
Unscored —

CVE-2018-18498

A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a ra…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Feb 28, 2019