RHSA-2023:3152: Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.This update upgrades Thunderbird to version 102.11.0.Security Fix(es): Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205) Mozilla: Crash in RLBox Expat driver (CVE-2023-32206) Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207) Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215) Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211) Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212) Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What are the security fixes included in RHSA-2023:3152?
RHSA-2023:3152 includes fixes for CVE-2023-32205 related to browser prompts being obscured by popups and a crash in the RLBox Expat driver.
What is the recommended version for Mozilla Thunderbird following RHSA-2023:3152?
The recommended version for Mozilla Thunderbird after applying RHSA-2023:3152 is 102.11.0.
How can I mitigate the vulnerabilities addressed in RHSA-2023:3152?
To mitigate the vulnerabilities in RHSA-2023:3152, you should upgrade Thunderbird to version 102.11.0 as soon as possible.
Which platforms are affected by RHSA-2023:3152?
RHSA-2023:3152 affects the Thunderbird packages on Red Hat Enterprise Linux 8 for x86_64 and ppc64le architectures.
Is it safe to continue using Thunderbird without applying RHSA-2023:3152?
It is not safe to continue using Thunderbird without applying RHSA-2023:3152 due to the potential security risks associated with the vulnerabilities.