Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 4

• Unscored —
  CVE-2021-29969

  If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses pr…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine
  Aug 5, 2021
• Unscored —
  CVE-2021-29970

  A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *Thi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Aug 5, 2021
• Unscored —
  CVE-2021-29976

  Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bu…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Aug 5, 2021
• Unscored —
  CVE-2021-30547

  Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform o…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Jun 15, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1970109
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1982013
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1982014
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1982015
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2882.json
• report
  https://access.redhat.com/security/cve/CVE-2021-29969
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-29969
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-29969
• report
  https://access.redhat.com/security/cve/CVE-2021-29970
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-29970
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-29970
• report
  https://access.redhat.com/security/cve/CVE-2021-29976
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-29976
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-29976
• report
  https://access.redhat.com/security/cve/CVE-2021-30547
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-30547
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-30547