Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Red Hat Enterprise 4: RHSA-2006:0330-01 Critical: Thunderbird Risk

red hat
Calendar Grey April 21, 2006
Dist Redhat Esm H88
A critical security update for Thunderbird in Red Hat Enterprise addresses numerous vulnerabilities that threaten user data.
An updated thunderbird package that fixes various bugs is now available for Red Hat Enterprise Linux 4

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

5. Bug IDs fixed (http://bugzilla.redhat.com/):

188848 - CVE-2006-1741 Cross-site JavaScript injection using event handlers 188850 - CVE-2006-1742 JavaScript garbage-collection hazard audit 188852 - CVE-2006-1737 Crashes with evidence of memory corruption (CVE-2006-1738, CVE-2006-1739, CVE-2006-1790) 188855 - CVE-2006-1735 Privilege escalation via XBL.method.eval 188857 - CVE-2006-1734 Privilege escalation using a JavaScript function's cloned parent 188859 - CVE-2006-1733 Accessing XBL compilation scope via valueOf.call() 188861 - CVE-2006-1732 cross-site scripting through window.controllers 188863 - CVE-2006-0749 Mozilla Firefox Tag Order Vulnerability 188865 - CVE-2006-1731 Cross-site scripting using .valueOf.call() 188867 - CVE-2006-1724 Crashes with evidence of memory corruption (1.5.0.2) 188871 - CVE-2006-1730 CSS Letter-Spacing Heap Overflow Vulnerability 188873 - CVE-2006-1728 Privilege escalation using crypto.generateCRMFRequest 188875 - CVE-2006-1727 Privilege escalation through Print Preview 188877 - CVE-2006-1045 Mail Multiple Information Disclosure 189180 - CVE-2006-0292 javascript unrooted access 189181 - CVE-2006-0296 XULDocument.persist() RDF data injection

6. RPMs required:

Red Hat Enterprise Linux AS version 4:

SRPMS: c8305acb3d2dedacf40a58f56e448f41 thunderbird-1.0.8-1.4.1.src.rpm

i386: 02ed6ce066e985a656c653deb060a0bd thunderbird-1.0.8-1.4.1.i386.rpm d5dc52769b9e62ad67fc2089706c3aea thunderbird-debuginfo-1.0.8-1.4.1.i386.rpm

ia64: b2ff6e3b2eb9b50e4b0b1c90f9a9b431 thunderbird-1.0.8-1.4.1.ia64.rpm 45d0598f33b90de2eb6bac64e90e070b thunderbird-debuginfo-1.0.8-1.4.1.ia64.rpm

ppc: dc58090fa480cff7f44ff7fb4e1ad3b3 thunderbird-1.0.8-1.4.1.ppc.rpm ce2a278a172bb89a574e2ddb5f938b0e thunderbird-debuginfo-1.0.8-1.4.1.ppc.rpm

s390: 9edcfee0fa0f8b382d5093b53484f091 thunderbird-1.0.8-1.4.1.s390.rpm c5647159643d7599866c519fa622daa2 thunderbird-debuginfo-1.0.8-1.4.1.s390.rpm

s390x: 703a6290f8025d58e5d9b39410b9d2f5 thunderbird-1.0.8-1.4.1.s390x.rpm 21c101500f58d5e1db7017a5d726a677 thunderbird-debuginfo-1.0.8-1.4.1.s390x.rpm

x86_64: acf9ac0262007fea4805c4bbfa49f228 thunderbird-1.0.8-1.4.1.x86_64.rpm 1fc5ff66ee06fa583f3fc6591ef5990f thunderbird-debuginfo-1.0.8-1.4.1.x86_64.rpm

Red Hat Enterprise Linux Desktop version 4:

SRPMS: c8305acb3d2dedacf40a58f56e448f41 thunderbird-1.0.8-1.4.1.src.rpm

i386: 02ed6ce066e985a656c653deb060a0bd thunderbird-1.0.8-1.4.1.i386.rpm d5dc52769b9e62ad67fc2089706c3aea thunderbird-debuginfo-1.0.8-1.4.1.i386.rpm

x86_64: acf9ac0262007fea4805c4bbfa49f228 thunderbird-1.0.8-1.4.1.x86_64.rpm 1fc5ff66ee06fa583f3fc6591ef5990f thunderbird-debuginfo-1.0.8-1.4.1.x86_64.rpm

Red Hat Enterprise Linux ES version 4:

SRPMS: c8305acb3d2dedacf40a58f56e448f41 thunderbird-1.0.8-1.4.1.src.rpm

i386: 02ed6ce066e985a656c653deb060a0bd thunderbird-1.0.8-1.4.1.i386.rpm d5dc52769b9e62ad67fc2089706c3aea thunderbird-debuginfo-1.0.8-1.4.1.i386.rpm

ia64: b2ff6e3b2eb9b50e4b0b1c90f9a9b431 thunderbird-1.0.8-1.4.1.ia64.rpm 45d0598f33b90de2eb6bac64e90e070b thunderbird-debuginfo-1.0.8-1.4.1.ia64.rpm

x86_64: acf9ac0262007fea4805c4bbfa49f228 thunderbird-1.0.8-1.4.1.x86_64.rpm 1fc5ff66ee06fa583f3fc6591ef5990f thunderbird-debuginfo-1.0.8-1.4.1.x86_64.rpm

Red Hat Enterprise Linux WS version 4:

SRPMS: c8305acb3d2dedacf40a58f56e448f41 thunderbird-1.0.8-1.4.1.src.rpm

i386: 02ed6ce066e985a656c653deb060a0bd thunderbird-1.0.8-1.4.1.i386.rpm d5dc52769b9e62ad67fc2089706c3aea thunderbird-debuginfo-1.0.8-1.4.1.i386.rpm

ia64: b2ff6e3b2eb9b50e4b0b1c90f9a9b431 thunderbird-1.0.8-1.4.1.ia64.rpm 45d0598f33b90de2eb6bac64e90e070b thunderbird-debuginfo-1.0.8-1.4.1.ia64.rpm

x86_64: acf9ac0262007fea4805c4bbfa49f228 thunderbird-1.0.8-1.4.1.x86_64.rpm 1fc5ff66ee06fa583f3fc6591ef5990f thunderbird-debuginfo-1.0.8-1.4.1.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package

Summary

Topics%20covered

Topics Covered

security advisory security issue software update critical update security impact red hat enterprise thunderbird

References

https://www.cve.org/CVERecord?id=CVE-2006-0292 https://www.cve.org/CVERecord?id=CVE-2006-0296 https://www.cve.org/CVERecord?id=CVE-2006-0749 https://www.cve.org/CVERecord?id=CVE-2006-1045 https://www.cve.org/CVERecord?id=CVE-2006-1724 https://www.cve.org/CVERecord?id=CVE-2006-1727 https://www.cve.org/CVERecord?id=CVE-2006-1728 https://www.cve.org/CVERecord?id=CVE-2006-1730 https://www.cve.org/CVERecord?id=CVE-2006-1731 https://www.cve.org/CVERecord?id=CVE-2006-1732 https://www.cve.org/CVERecord?id=CVE-2006-1733 https://www.cve.org/CVERecord?id=CVE-2006-1734 https://www.cve.org/CVERecord?id=CVE-2006-1735 https://www.cve.org/CVERecord?id=CVE-2006-1737 https://www.cve.org/CVERecord?id=CVE-2006-1738 https://www.cve.org/CVERecord?id=CVE-2006-1739 https://www.cve.org/CVERecord?id=CVE-2006-1741 https://www.cve.org/CVERecord?id=CVE-2006-1742 https://www.cve.org/CVERecord?id=CVE-2006-1790 https://access.redhat.com/security/updates/classification#critical

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2006:0330-01
Advisory URL: https://access.redhat.com/errata/RHSA-2006:0330.html
Issue date: 2006-04-21
Updated on: 2006-04-21
Product: Red Hat Enterprise Linux

Topic

Topics%20covered

Topics Covered

security advisory security issue software update critical update security impact red hat enterprise thunderbird

Relevant Releases Architectures

Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64

Red Hat Enterprise Linux Desktop version 4 - i386, x86_64

Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64

Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here