Red Hat Security Advisory: thunderbird security update

Fixed packages 6

Vulnerabilities 4

• Unscored —
  CVE-2016-5824

  libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.

  thunderbird thunderbird libical Debian Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2018-18500 Public exploit EPSS 13%

  A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This resul…

  thunderbird mozjs38 mozjs52 firefox Debian Ubuntu Alpine
  Feb 5, 2019
• Unscored —
  CVE-2018-18501

  Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some o…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Feb 5, 2019
• Unscored —
  CVE-2018-18505

  An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communica…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Feb 5, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-03/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375120
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670631
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670632
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670633
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0269.json
• report
  https://access.redhat.com/security/cve/CVE-2016-5824
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5824
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5824
• report
  https://access.redhat.com/security/cve/CVE-2018-18500
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18500
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18500
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-02/#CVE-2018-18500
• report
  https://access.redhat.com/security/cve/CVE-2018-18501
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18501
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18501
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-02/#CVE-2018-18501
• report
  https://access.redhat.com/security/cve/CVE-2018-18505
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-18505
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-18505
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-02/#CVE-2018-18505