Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 enterprise_linux:6::client | thunderbird | 0:52.5.2-1.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::client | thunderbird-debuginfo | 0:52.5.2-1.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | thunderbird | 0:52.5.2-1.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | thunderbird-debuginfo | 0:52.5.2-1.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | thunderbird | 0:52.5.2-1.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | thunderbird-debuginfo | 0:52.5.2-1.el6_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | thunderbird | 0:52.5.2-1.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::client | thunderbird-debuginfo | 0:52.5.2-1.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::server | thunderbird | 0:52.5.2-1.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::server | thunderbird-debuginfo | 0:52.5.2-1.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | thunderbird | 0:52.5.2-1.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | thunderbird-debuginfo | 0:52.5.2-1.el7_4 |
Vulnerabilities 4
-
Unscored —
It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The …
-
Unscored —
It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via "View -> Fee…
-
Unscored —
Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affe…
-
Unscored —
RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affect…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-30/
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1530187
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1530190
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1530192
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1530195
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0061.json
-
report
https://access.redhat.com/security/cve/CVE-2017-7829
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-7829
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7829
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-30/#CVE-2017-7829
-
report
https://access.redhat.com/security/cve/CVE-2017-7846
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-7846
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7846
-
report
https://access.redhat.com/security/cve/CVE-2017-7847
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-7847
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7847
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-30/#CVE-2017-7847
-
report
https://access.redhat.com/security/cve/CVE-2017-7848
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-7848
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7848
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-30/#CVE-2017-7848