Linux · Oracle Linux · Security advisory · July 30, 2019

ELSA-2019-1308: thunderbird security update

ELSA-2019-1308, released July 30, 2019, fixes 12 CVEs in thunderbird (version 0:60.7.0-1.0.1.el8_0). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
12
11 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0939
95th percentile

Priority of the 12 CVEs

Patch now 0 Urgent 11 High 0 Routine 1

Fixed package versions

ProductReleaseFixed in
thunderbirdol 80:60.7.0-1.0.1.el8_0

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2019-5798 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...6.5 0.0321 None reported
Urgent CVE-2019-11693 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...9.8 0.0241 None reported
Urgent CVE-2019-9800 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...9.8 0.0173 None reported
Urgent CVE-2019-9819 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...9.8 0.0169 None reported
Urgent CVE-2019-9820 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...9.8 0.0164 None reported
Urgent CVE-2018-18511 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...4.3 0.0162 None reported
Urgent CVE-2019-11692 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...9.8 0.0160 None reported
Urgent CVE-2019-11691 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...9.8 0.0156 None reported
Urgent CVE-2019-11698 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...6.1 0.0135 None reported
Urgent CVE-2019-9797 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...5.3 0.0111 None reported
Urgent CVE-2019-9817 firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This...5.3 0.0080 None reported
Routine CVE-2019-7317 firefox: png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-freebecause png_image_free_function is called u...5.3 0.0939 None reported
Showing 1 to 12 of 12 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.