High ELSA-2019-0270 4 CVEs

Important: thunderbird security update (Oracle Linux 7)

Published Feb 4, 2019 · Updated Feb 4, 2019

Ecosystem: Oracle Linux

Summary

[60.5.0-1.0.1]
- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

[60.5.0-1]
- Update to 60.5.0

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	thunderbird	0:60.5.0-1.0.1.el7_6

Vulnerabilities 4

Unscored —

CVE-2016-5824

libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.

thunderbird thunderbird libical Debian Ubuntu

Jan 27, 2017
Unscored —

CVE-2018-18500 Public exploit EPSS 13%

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This resul…

thunderbird mozjs38 mozjs52 firefox Debian Ubuntu Alpine

Feb 5, 2019
Unscored —

CVE-2018-18501

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some o…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 5, 2019
Unscored —

CVE-2018-18505

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communica…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Feb 5, 2019