Linux · Security advisory · July 26, 2021
RHSA-2021:2883: thunderbird security update
RHSA-2021:2883, released July 26, 2021, fixes 4 CVEs in thunderbird (version 0:78.12.0-3.el8_4). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0361
89th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 3
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| thunderbird | RHEL 8 | 0:78.12.0-3.el8_4 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-30547 | Chromium: CVE-2021-30547 Out of bounds write in ANGLE | 8.8 | 0.0361 | None reported | |
| High | CVE-2021-29970 | Firefox ESR and 3 others: A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable… | 8.8 | 0.0143 | None reported | |
| High | CVE-2021-29976 | Firefox ESR and 3 others: Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. | 8.8 | 0.0122 | None reported | |
| Routine | CVE-2021-29969 | Thunderbird and 1 other: If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server… | 5.9 | 0.0120 | None reported |
Showing 1 to 4 of 4
1