Linux · Security advisory · April 26, 2021
RHSA-2021:1353: thunderbird security update
RHSA-2021:1353, released April 26, 2021, fixes 9 CVEs in thunderbird (version 0:78.10.0-1.el8_3). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0176
78th percentile
Priority of the 9 CVEs
Patch now 0
Urgent 0
High 6
Routine 3
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| thunderbird | RHEL 8 | 0:78.10.0-1.el8_3 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-23994 | Firefox ESR and 2 others: A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound… | 8.8 | 0.0176 | None reported | |
| High | CVE-2021-23961 | Firefox ESR and 1 other: Further techniques that built on the slipstream research combined with a malicious webpage could have… | 7.4 | 0.0148 | None reported | |
| High | CVE-2021-23999 | Firefox ESR and 2 others: If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System… | 8.8 | 0.0137 | None reported | |
| High | CVE-2021-29946 | Firefox ESR and 2 others: Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed… | 8.8 | 0.0130 | None reported | |
| High | CVE-2021-23995 | Firefox ESR and 2 others: When Responsive Design Mode was enabled, it used references to objects that were previously freed. | 8.8 | 0.0118 | None reported | |
| High | CVE-2021-24002 | Firefox ESR and 2 others: When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would… | 8.8 | 0.0113 | None reported | |
| Routine | CVE-2021-29945 | Firefox ESR and 2 others: The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and… | 6.5 | 0.0120 | None reported | |
| Routine | CVE-2021-23998 | Firefox ESR and 2 others: Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon… | 6.5 | 0.0059 | None reported | |
| Routine | CVE-2021-29948 | Thunderbird: Signatures are written to disk before and read during verification, which might be subject to a race… | 2.5 | 0.0029 | None reported |
Showing 1 to 9 of 9
1