Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 7

• Unscored —
  CVE-2023-6204

  On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Nov 21, 2023
• Unscored —
  CVE-2023-6205

  It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Nov 21, 2023
• Unscored —
  CVE-2023-6206

  The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission pro…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Nov 21, 2023
• Unscored —
  CVE-2023-6207

  Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Nov 21, 2023
• Unscored —
  CVE-2023-6208

  When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Nov 21, 2023
• Unscored —
  CVE-2023-6209

  Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could b…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Nov 21, 2023
• Unscored —
  CVE-2023-6212

  Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Nov 21, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250896
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250897
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250898
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250899
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250900
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250901
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250902
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7502.json
• report
  https://access.redhat.com/security/cve/CVE-2023-6204
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6204
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6204
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6204
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6204
• report
  https://access.redhat.com/security/cve/CVE-2023-6205
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6205
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6205
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6205
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6205
• report
  https://access.redhat.com/security/cve/CVE-2023-6206
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6206
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6206
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6206
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6206
• report
  https://access.redhat.com/security/cve/CVE-2023-6207
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6207
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6207
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6207
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6207
• report
  https://access.redhat.com/security/cve/CVE-2023-6208
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6208
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6208
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6208
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6208
• report
  https://access.redhat.com/security/cve/CVE-2023-6209
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6209
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6209
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6209
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6209