Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 5

• Unscored —
  CVE-2023-37201

  An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerab…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37202

  Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37207

  A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37208

  When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerabili…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37211

  Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed eviden…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 5, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2219747
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2219748
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2219749
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2219750
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2219751
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4064.json
• report
  https://access.redhat.com/security/cve/CVE-2023-37201
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-37201
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-37201
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-23/#CVE-2023-37201
• report
  https://access.redhat.com/security/cve/CVE-2023-37202
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-37202
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-37202
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-23/#CVE-2023-37202
• report
  https://access.redhat.com/security/cve/CVE-2023-37207
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-37207
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-37207
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-23/#CVE-2023-37207
• report
  https://access.redhat.com/security/cve/CVE-2023-37208
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-37208
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-37208
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-23/#CVE-2023-37208
• report
  https://access.redhat.com/security/cve/CVE-2023-37211
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-37211
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-37211
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-23/#CVE-2023-37211