Red Hat Security Advisory: thunderbird security and bug fix update
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-9811US | high8.3 | — | ||
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised… | ||||
| CVE-2019-11730US | medium6.5 | — | ||
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are… | ||||
| CVE-2019-11717US | medium5.3 | — | ||
A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin at… | ||||
| CVE-2019-11715US | medium6.1 | — | ||
Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. Thi… | ||||
| CVE-2019-11713US | critical9.8 | — | ||
A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash. This vulnerability affect… | ||||
| CVE-2019-11712US | high8.8 | — | ||
POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Reque… | ||||
| CVE-2019-11711US | high8.8 | — | ||
When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages on different subdomains ever cooperatively use document.domai… | ||||
| CVE-2019-11709US | critical9.8 | — | ||
Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some of these bugs showed evidence of memory corruption and we pres… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2019:1799self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 1725919external
- 1728430external
- 1728431external
- 1728432external
- 1728433external
- 1728434external
remediations (56)
- Fixedthunderbird-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debuginfo-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799 - Fixedthunderbird-debugsource-0:60.8.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.
https://access.redhat.com/errata/RHSA-2019:1799
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan