# ELSA-2019-1623: thunderbird security update

ELSA-2019-1623, released July 30, 2019, fixes 6 CVEs in thunderbird (version 0:60.7.2-2.0.1.el8_0). 2 of them are being exploited (CVE-2019-11708); 2 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/elsa-2019-1623
- Platform: Linux
- Released: Jul 30, 2019
- Priority: Patch now (Closes CVE-2019-11708, exploited (CISA KEV))
- CVEs: 6, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2019-1623.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [thunderbird](https://patchblox.com/security/data/product/linux/thunderbird.md) | ol 8 | 0:60.7.2-2.0.1.el8_0 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2019-11708](https://patchblox.com/security/data/cve/CVE-2019-11708.md) | Patch now | firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  This... | 10.0 | 0.5587 | CISA KEV |
| [CVE-2019-11707](https://patchblox.com/security/data/cve/CVE-2019-11707.md) | Patch now | firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  This... | 8.8 | 0.3795 | CISA KEV |
| [CVE-2019-11703](https://patchblox.com/security/data/cve/CVE-2019-11703.md) | High | thunderbird: Mozilla Thunderbird is a standalone mail and newsgroup client.  This update upgrades Thunderbird to version 60.7.2.... | 9.8 | 0.1053 |  |
| [CVE-2019-11704](https://patchblox.com/security/data/cve/CVE-2019-11704.md) | High | thunderbird: Mozilla Thunderbird is a standalone mail and newsgroup client.  This update upgrades Thunderbird to version 60.7.2.... | 9.8 | 0.1053 |  |
| [CVE-2019-11705](https://patchblox.com/security/data/cve/CVE-2019-11705.md) | High | thunderbird: Mozilla Thunderbird is a standalone mail and newsgroup client.  This update upgrades Thunderbird to version 60.7.2.... | 9.8 | 0.0990 |  |
| [CVE-2019-11706](https://patchblox.com/security/data/cve/CVE-2019-11706.md) | High | thunderbird: Mozilla Thunderbird is a standalone mail and newsgroup client.  This update upgrades Thunderbird to version 60.7.2.... | 7.5 | 0.0973 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo