Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 4

• Unscored —
  CVE-2021-23968

  If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reporte…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Feb 26, 2021
• Unscored —
  CVE-2021-23969

  As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure th…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Feb 26, 2021
• Unscored —
  CVE-2021-23973

  When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the conte…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Feb 26, 2021
• Unscored —
  CVE-2021-23978

  Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed ev…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Feb 26, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1932109
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1932110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1932111
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1932112
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0657.json
• report
  https://access.redhat.com/security/cve/CVE-2021-23968
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23968
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23968
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-08/#CVE-2021-23968
• report
  https://access.redhat.com/security/cve/CVE-2021-23969
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23969
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23969
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-08/#CVE-2021-23969
• report
  https://access.redhat.com/security/cve/CVE-2021-23973
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23973
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23973
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-08/#CVE-2021-23973
• report
  https://access.redhat.com/security/cve/CVE-2021-23978
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23978
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23978
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-08/#CVE-2021-23978