Linux · Security advisory · October 30, 2023
RHSA-2023:6191: thunderbird security update
RHSA-2023:6191, released October 30, 2023, fixes 7 CVEs in thunderbird (version 0:115.4.1-1.el9_2). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0216
82nd percentile
Priority of the 7 CVEs
Patch now 0
Urgent 0
High 5
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| thunderbird | RHEL 9 | 0:115.4.1-1.el9_2 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2023-44488 | libvpx: This update for libvpx fixes the following issues: - CVE-2024-5197: Fixed interger overflow when calling vpx_img_all... | 8.8 | 0.0216 | None reported | |
| High | CVE-2023-5730 | Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. | 9.8 | 0.0154 | None reported | |
| High | CVE-2023-5724 | Mozilla Firefox ESR and 5 others: Uncontrolled Resource Consumption | 7.5 | 0.0152 | None reported | |
| High | CVE-2023-5728 | Mozilla Firefox ESR and 5 others: Use After Free | 7.5 | 0.0132 | None reported | |
| High | CVE-2023-5721 | Mozilla Firefox ESR and 5 others: It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally… | 7.5 | 0.0081 | None reported | |
| Routine | CVE-2023-5732 | Address bar spoofing via bidirectional characters | 6.5 | 0.0105 | None reported | |
| Routine | CVE-2023-5725 | Mozilla Firefox ESR and 5 others: A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could… | 6.1 | 0.0094 | None reported |
Showing 1 to 7 of 7
1