RHSA-2023:1407: Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.This update upgrades Thunderbird to version 102.9.0.Security Fix(es): Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 (CVE-2023-28176) Mozilla: Potential out-of-bounds when accessing throttled streams (CVE-2023-25752) Mozilla: Invalid downcast in Worklets (CVE-2023-28162) Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (CVE-2023-28164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What security vulnerabilities are addressed in RHSA-2023:1407?
RHSA-2023:1407 addresses incorrect code generation during JIT compilation (CVE-2023-25751) and memory safety bugs in Thunderbird.
How do I upgrade to the fixed version for RHSA-2023:1407?
To address RHSA-2023:1407, upgrade to Thunderbird version 102.9.0-1.el9_1.
What is the impact of not fixing RHSA-2023:1407?
Not fixing RHSA-2023:1407 can leave the system vulnerable to exploits related to memory safety and JIT compilation issues.
Is my version of Thunderbird affected by RHSA-2023:1407?
If you are using a version of Thunderbird prior to 102.9.0-1.el9_1, your installation is affected by RHSA-2023:1407.
Are there any specific system requirements for the upgrade related to RHSA-2023:1407?
The upgrade for RHSA-2023:1407 is available for Red Hat Enterprise Linux versions compatible with Thunderbird 102.9.0-1.el9_1.