Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 2

• Unscored —
  CVE-2023-34414

  The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 19, 2023
• Unscored —
  CVE-2023-34416

  Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed eviden…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 19, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2212841
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2212842
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3587.json
• report
  https://access.redhat.com/security/cve/CVE-2023-34414
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-34414
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-34414
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-19/#CVE-2023-34414
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-21/#CVE-2023-34414
• report
  https://access.redhat.com/security/cve/CVE-2023-34416
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-34416
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-34416
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-19/#CVE-2023-34416
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-21/#CVE-2023-34416