Summary
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 102.10.0.
Security Fix(es):
* Thunderbird: Revocation status of S/Mime recipient certificates was not checked (CVE-2023-0547)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2023-28427)
* Mozilla: Fullscreen notification obscured (CVE-2023-29533)
* Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535)
* Mozilla: Invalid free from JavaScript code (CVE-2023-29536)
* Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550)
* Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945)
* Thunderbird: Hang when processing certain OpenPGP messages (CVE-2023-29479)
* Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539)
* Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541)
* Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548)
* MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | thunderbird | 0:102.10.0-2.el8_7 |
Vulnerabilities 11
-
High 8.8
Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run att…
-
High 8.8
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruptio…
-
High 8.2
Prototype pollution in matrix-js-sdk
matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the …
-
Medium 6.5
OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certi…
-
Medium 6.5
Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable c…
-
Medium 6.5
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affe…
-
Medium 5.3
Ribose RNP before 0.16.3 may hang when the input is malformed.
-
Unscored —
A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscree…
-
Unscored —
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resu…
-
Unscored —
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, res…
-
Unscored —
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2183278
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186101
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186102
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186103
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186104
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186105
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186106
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186109
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186110
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186111
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186734
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2186735