Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 3

• High 8.8
  CVE-2022-2505

  Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 7.5
  CVE-2022-36319

  When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates th…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 5.3
  CVE-2022-36318

  When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerabilit…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2111907
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2111908
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2111910
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5772.json
• report
  https://access.redhat.com/security/cve/CVE-2022-2505
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2505
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2505
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-30/#CVE-2022-2505
• report
  https://access.redhat.com/security/cve/CVE-2022-36318
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-36318
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-36318
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-30/#CVE-2022-36318
• report
  https://access.redhat.com/security/cve/CVE-2022-36319
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-36319
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-36319
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-30/#CVE-2022-36319