Red Hat Security Advisory: thunderbird security update

Fixed packages 6

Vulnerabilities 8

• Unscored —
  CVE-2019-11709

  Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some o…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11711

  When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11712

  POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS require…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11713

  A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11715

  Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and l…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11717

  A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being use…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11730 Public exploit EPSS 20%

  A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other fi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-9811

  As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-23/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728430
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728431
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728432
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728433
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728434
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728435
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728438
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728439
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1775.json
• report
  https://access.redhat.com/security/cve/CVE-2019-9811
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-9811
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-9811
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-9811
• report
  https://access.redhat.com/security/cve/CVE-2019-11709
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11709
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11709
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11709
• report
  https://access.redhat.com/security/cve/CVE-2019-11711
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11711
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11711
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11711
• report
  https://access.redhat.com/security/cve/CVE-2019-11712
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11712
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11712
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11712
• report
  https://access.redhat.com/security/cve/CVE-2019-11713
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11713
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11713
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11713
• report
  https://access.redhat.com/security/cve/CVE-2019-11715
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11715
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11715
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11715
• report
  https://access.redhat.com/security/cve/CVE-2019-11717
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11717
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11717
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11717