Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Red Hat Enterprise 4: RHSA-2007:0078-01 Critical: Thunderbird Flaw

red hat
Calendar Grey March 2, 2007
Dist Redhat Esm H88
Important advisory from Red Hat regarding significant vulnerabilities in Thunderbird, recommending that users perform an upgrade to ensure security.
Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the...

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

5. Bug IDs fixed (http://bugzilla.redhat.com/):

204453 - Thunderbird startup script not updated for the add-on based locale 230542 - CVE-2007-0775 Multiple Thunderbird flaws (CVE-2007-0777, CVE-2007-0995, CVE-2007-0996, CVE-2006-6077, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0008, CVE-2007-0009, CVE-2007-0981, CVE-2007-1092) 230733 - CVE-2007-0994 Thunderbird arbitrary javascript command execution

6. RPMs required:

Red Hat Enterprise Linux AS version 4:

SRPMS: 61e8fd63c57291ea007117b1a4ca77ef thunderbird-1.5.0.10-0.1.el4.src.rpm

i386: 476d788b6fee2f095a21f0e2f65c1474 thunderbird-1.5.0.10-0.1.el4.i386.rpm 61c667cb434f9f38aa18fca85d7631c0 thunderbird-debuginfo-1.5.0.10-0.1.el4.i386.rpm

ia64: 2b2d89e99412ae5dff0c9839ebbea606 thunderbird-1.5.0.10-0.1.el4.ia64.rpm fde88d8525d4ac222aba0581b1d76b30 thunderbird-debuginfo-1.5.0.10-0.1.el4.ia64.rpm

ppc: 339c890b3b2e6d0e3793d21fdeb94431 thunderbird-1.5.0.10-0.1.el4.ppc.rpm 3e6f95720045a82a1bed05722d3fbf66 thunderbird-debuginfo-1.5.0.10-0.1.el4.ppc.rpm

s390: 402cf9e68a52f43b1aacb3726efd8f55 thunderbird-1.5.0.10-0.1.el4.s390.rpm adfc6b41f62d4bb21f48ed1221f7328b thunderbird-debuginfo-1.5.0.10-0.1.el4.s390.rpm

s390x: 9b5df13b2a710819dc125cc6934bd5e8 thunderbird-1.5.0.10-0.1.el4.s390x.rpm 4a505c3e32d70b1caff27e1cb8d191b2 thunderbird-debuginfo-1.5.0.10-0.1.el4.s390x.rpm

x86_64: 71ef8d103632694f24d612c36b1dfe5d thunderbird-1.5.0.10-0.1.el4.x86_64.rpm 45750ce0924bd52ce9d42ac3ddb7df20 thunderbird-debuginfo-1.5.0.10-0.1.el4.x86_64.rpm

Red Hat Enterprise Linux Desktop version 4:

SRPMS: 61e8fd63c57291ea007117b1a4ca77ef thunderbird-1.5.0.10-0.1.el4.src.rpm

i386: 476d788b6fee2f095a21f0e2f65c1474 thunderbird-1.5.0.10-0.1.el4.i386.rpm 61c667cb434f9f38aa18fca85d7631c0 thunderbird-debuginfo-1.5.0.10-0.1.el4.i386.rpm

x86_64: 71ef8d103632694f24d612c36b1dfe5d thunderbird-1.5.0.10-0.1.el4.x86_64.rpm 45750ce0924bd52ce9d42ac3ddb7df20 thunderbird-debuginfo-1.5.0.10-0.1.el4.x86_64.rpm

Red Hat Enterprise Linux ES version 4:

SRPMS: 61e8fd63c57291ea007117b1a4ca77ef thunderbird-1.5.0.10-0.1.el4.src.rpm

i386: 476d788b6fee2f095a21f0e2f65c1474 thunderbird-1.5.0.10-0.1.el4.i386.rpm 61c667cb434f9f38aa18fca85d7631c0 thunderbird-debuginfo-1.5.0.10-0.1.el4.i386.rpm

ia64: 2b2d89e99412ae5dff0c9839ebbea606 thunderbird-1.5.0.10-0.1.el4.ia64.rpm fde88d8525d4ac222aba0581b1d76b30 thunderbird-debuginfo-1.5.0.10-0.1.el4.ia64.rpm

x86_64: 71ef8d103632694f24d612c36b1dfe5d thunderbird-1.5.0.10-0.1.el4.x86_64.rpm 45750ce0924bd52ce9d42ac3ddb7df20 thunderbird-debuginfo-1.5.0.10-0.1.el4.x86_64.rpm

Red Hat Enterprise Linux WS version 4:

SRPMS: 61e8fd63c57291ea007117b1a4ca77ef thunderbird-1.5.0.10-0.1.el4.src.rpm

i386: 476d788b6fee2f095a21f0e2f65c1474 thunderbird-1.5.0.10-0.1.el4.i386.rpm 61c667cb434f9f38aa18fca85d7631c0 thunderbird-debuginfo-1.5.0.10-0.1.el4.i386.rpm

ia64: 2b2d89e99412ae5dff0c9839ebbea606 thunderbird-1.5.0.10-0.1.el4.ia64.rpm fde88d8525d4ac222aba0581b1d76b30 thunderbird-debuginfo-1.5.0.10-0.1.el4.ia64.rpm

x86_64: 71ef8d103632694f24d612c36b1dfe5d thunderbird-1.5.0.10-0.1.el4.x86_64.rpm 45750ce0924bd52ce9d42ac3ddb7df20 thunderbird-debuginfo-1.5.0.10-0.1.el4.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package

Summary

Topics%20covered

Topics Covered

security advisory security issue red hat critical software update code execution thunderbird

References

https://www.cve.org/CVERecord?id=CVE-2006-6077 https://www.cve.org/CVERecord?id=CVE-2007-0008 https://www.cve.org/CVERecord?id=CVE-2007-0009 https://www.cve.org/CVERecord?id=CVE-2007-0775 https://www.cve.org/CVERecord?id=CVE-2007-0777 https://www.cve.org/CVERecord?id=CVE-2007-0778 https://www.cve.org/CVERecord?id=CVE-2007-0779 https://www.cve.org/CVERecord?id=CVE-2007-0780 https://www.cve.org/CVERecord?id=CVE-2007-0800 https://www.cve.org/CVERecord?id=CVE-2007-0981 https://www.cve.org/CVERecord?id=CVE-2007-0994 https://www.cve.org/CVERecord?id=CVE-2007-0995 https://www.cve.org/CVERecord?id=CVE-2007-0996 https://www.cve.org/CVERecord?id=CVE-2007-1092 https://access.redhat.com/security/updates/classification#critical

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2007:0078-01
Advisory URL: https://access.redhat.com/errata/RHSA-2007:0078.html
Issue date: 2007-03-02
Updated on: 2007-03-02
Product: Red Hat Enterprise Linux

Topic

Topics%20covered

Topics Covered

security advisory security issue red hat critical software update code execution thunderbird

Relevant Releases Architectures

Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64

Red Hat Enterprise Linux Desktop version 4 - i386, x86_64

Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64

Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here