RHSA-2023:1402: Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.This update upgrades Thunderbird to version 102.9.0.Security Fix(es): Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 (CVE-2023-28176) Mozilla: Potential out-of-bounds when accessing throttled streams (CVE-2023-25752) Mozilla: Invalid downcast in Worklets (CVE-2023-28162) Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (CVE-2023-28164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:1402?
The severity of RHSA-2023:1402 is categorized as important due to the security fixes it addresses.
How do I fix RHSA-2023:1402?
To fix RHSA-2023:1402, upgrade Mozilla Thunderbird to version 102.9.0-1.el9_0 or later.
What vulnerabilities does RHSA-2023:1402 address?
RHSA-2023:1402 addresses memory safety bugs and incorrect code generation during JIT compilation.
What software does RHSA-2023:1402 affect?
RHSA-2023:1402 affects Mozilla Thunderbird and its associated debuginfo and debugsource packages.
Is there a reference for RHSA-2023:1402?
Yes, you can find more information on RHSA-2023:1402 in the Red Hat advisory or bug reports.