Red Hat Bug Fix Advisory: Updated rhel9/thunderbird-flatpak container image
An updated rhel9/thunderbird-flatpak container image is now available in the Red Hat container registry.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-4863US | high8.8OT kritisch | KEV | ||
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML pag… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- Behobenrhel9/thunderbird-flatpak@sha256:870084c57d8583ce25c8503df6b83df2553b72b463a7be67592f4661cdafd9e7_amd64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
To install and use Red Hat Enterprise Linux Flatpak content available in the the Red Hat Container Catalog, make sure that you have the latest version of the Flatpak client installed on your system: yum update flatpak After updating the Flatpak packages, add the Flatpak remote to your system: flatpak remote-add rhel https://flatpaks.redhat.io/rhel.flatpakrepo Provide the credentials for your Red Hat Enterprise Linux account: podman login registry.redhat.io Podman only saves credentials until the user logs out. To save your credentials permanently, run: cp $XDG_RUNTIME_DIR/containers/auth.json $HOME/.config/flatpak/oci-auth.json To enable the RHEL Flatpak remote for a set of workstations within an organization, you should use a Registry Service Account. Credentials can be installed system-wide at /etc/flatpak/oci-auth.json. Then, you can install the Thunderbird Flatpak container image: flatpak install rhel org.thunderbird.Thunderbird For more information about the image, search the <image_name> in the Red Hat Ecosystem Catalog: https://catalog.redhat.com/software/containers/search.
https://access.redhat.com/errata/RHBA-2023:6004 - Workaroundrhel9/thunderbird-flatpak@sha256:870084c57d8583ce25c8503df6b83df2553b72b463a7be67592f4661cdafd9e7_amd64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan