Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Date: Thu, 2 Feb 2017 23:32:40 -0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific LinuxFrom: Connie Sieh Subject: Security ERRATA Important: thunderbird on SL5.x, SL6.x, SL7.x i386/x86_64 MIME-Version: 1.0 Message-ID: <20170202233240.15022.72495@slpackages.fnal.gov> Synopsis: Important: thunderbird security update Advisory ID: SLSA-2017:0238-1 Issue Date: 2017-02-02 CVE Numbers: CVE-2017-5373 CVE-2017-5375 CVE-2017-5376 CVE-2017-5378 CVE-2017-5380 CVE-2017-5390 CVE-2017-5396 CVE-2017-5383 -- This update upgrades Thunderbird to version 45.7.0. Security Fix(es): * Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2017-5373, CVE-2017-5375, CVE-2017-5376, CVE-2017-5378, CVE-2017-5380, CVE-2017-5383, CVE-2017-5390, CVE-2017-5396) -- SL5 x86_64 thunderbird-45.7.0-1.el5_11.x86_64.rpm thunderbird-debuginfo-45.7.0-1.el5_11.x86_64.rpm i386 thunderbird-45.7.0-1.el5_11.i386.rpm thunderbird-debuginfo-45.7.0-1.el5_11.i386.rpm SL6 x86_64 thunderbird-45.7.0-1.el6_8.x86_64.rpm thunderbird-debuginfo-45.7.0-1.el6_8.x86_64.rpm i386 thunderbird-45.7.0-1.el6_8.i686.rpm thunderbird-debuginfo-45.7.0-1.el6_8.i686.rpm SL7 x86_64 thunderbird-45.7.0-1.el7_3.x86_64.rpm thunderbird-debuginfo-45.7.0-1.el7_3.x86_64.rpm - Scientific Linux Development Team