Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 7

• Unscored —
  CVE-2019-11739

  Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/fo…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Sep 27, 2019
• Unscored —
  CVE-2019-11740

  Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11742

  A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters an…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11743

  Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instance…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11744

  Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating the…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11746

  A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. Thi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019
• Unscored —
  CVE-2019-11752

  It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Sep 27, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748652
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748653
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748654
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748655
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748656
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1748657
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1752307
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2774.json
• report
  https://access.redhat.com/security/cve/CVE-2019-11739
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11739
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11739
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-29/#CVE-2019-11739
• report
  https://access.redhat.com/security/cve/CVE-2019-11740
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11740
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11740
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11740
• report
  https://access.redhat.com/security/cve/CVE-2019-11742
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11742
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11742
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11742
• report
  https://access.redhat.com/security/cve/CVE-2019-11743
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11743
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11743
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11743
• report
  https://access.redhat.com/security/cve/CVE-2019-11744
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11744
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11744
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11744
• report
  https://access.redhat.com/security/cve/CVE-2019-11746
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11746
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11746
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11746
• report
  https://access.redhat.com/security/cve/CVE-2019-11752
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11752
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11752
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/#CVE-2019-11752