Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 1 articles for you...
89
security advisoryfedoraupdateFedora 43: Thunderbird Update Advisory FEDORA-2025-82ee346ee8
Update to latest upstream version.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-82ee346ee8 2025-10-05 00:15:00.309689+00:00 -------------------------------------------------------------------------------- Name : thunderbird Product : Fedora 43 Version : 140.3.0 Release : 1.fc43 URL : https://wiki.mozilla.org/Thunderbird:Home_Page Summary : Mozilla Thunderbird mail/newsgroup client Description : Mozilla Thunderbird is a standalone mail and newsgroup client. -------------------------------------------------------------------------------- Update Information: Update to latest upstream version. -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 24 2025 Jan Horak - 140.3.0-1 - Update to 140.3.0 ESR * Thu Sep 4 2025 Jan Horak - 140.2.1-1 - Update to 140.2.1 ESR -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-82ee346ee8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Oct 05, 2025
•Informational
Fedora
197
security advisorydebiancritical threatDebian LTS DLA-4054-1 critical: Tryton Client zip bomb threat
Cédric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip bomb attacks (see DLA 4022-1). . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4054-1
Feb 16, 2025
•Critical
Debian LTS
98
security advisoryRed Hatnetwork communicationRed Hat 2.1: RHSA-2003:178-01 Severe up2date Connectivity Problem
This release also includes an updated RHNS-CA-CERT file, which contains an additional CA certificate. This is needed so that up2date can continue to communicate with Red Hat Network once the current CA certificate reaches its August 2003 expiration date. . --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated up2date and rhn_register clients available Advisory ID: RHSA-2003:177-01 Issue date: 2003-05-27 Updated on: 2003-05-27 Product: Red Hat Enterprise Linux Keywords: up2date rhn_register rpm Red Hat Network up2date-gnome update agent Cross references: Obsoletes: ---------------------------------------------------------------------1. Topic: Updated versions of the rhn_register and up2date packages are now available. The new packages include many bug fixes, and a few new features. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64 Red Hat Linux Advanced Workstation 2.1 - ia64 Red Hat Enterprise Linux ES version 2.1 - i386 Red Hat Enterprise Linux WS version 2.1 - i386 3. Problem description: The rhn_register and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. The up2date package incorporates improvements in handling package dependencies and "obsoletes" processing, along with many other bug fixes. This release also includes an updated RHNS-CA-CERT file, which contains an additional CA certificate. This is needed so that up2date can continue to communicate with Red Hat Network once the current CA certificate reaches its August 2003 expiration date. All users of Red Hat Network should therefore upgrade to these erratum packages. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture,run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed ( for more info): 67865 - "up2date --version" does NOT display version 65423 - "up2date -f" does not update skipped packages on first attempt 64851 - Non fatal Gtk errors when up2date hits a package already in its cache 64796 - up2date segfaults during Migration 64791 - Typo in manpage of up2date 64771 - Updating from 7.2 to 7.3 then using up2date yields 557 "outdated" packages in RHN 63921 - "kb" for file sizes should probably be "kB" 63917 - "toverify" typo in up2date 63907 - "Overrite" typo in up2date 63484 - Can't only select skipped files 63301 - unknown signatures aren't warned 53247 - up2date -u -nox fails 6. RPMs required: Red Hat Enterprise Linux AS (Advanced Server) version 2.1: SRPMS: i386: Available from Red Hat Network: up2date-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: up2date-gnome-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-2.8.34-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm ia64: Available from Red Hat Network: up2date-2.8.45-1.2.1AS.ia64.rpm Available from Red Hat Network: up2date-gnome-2.8.45-1.2.1AS.ia64.rpm Available from Red Hat Network: rhn_register-2.8.34-1.2.1AS.ia64.rpm Available from Red Hat Network: rhn_register-gnome-2.8.34-1.2.1AS.ia64.rpm Red Hat LinuxAdvanced Workstation 2.1: SRPMS: ia64: Available from Red Hat Network: up2date-2.8.45-1.2.1AS.ia64.rpm Available from Red Hat Network: up2date-gnome-2.8.45-1.2.1AS.ia64.rpm Available from Red Hat Network: rhn_register-2.8.34-1.2.1AS.ia64.rpm Available from Red Hat Network: rhn_register-gnome-2.8.34-1.2.1AS.ia64.rpm Red Hat Enterprise Linux ES version 2.1: SRPMS: i386: Available from Red Hat Network: up2date-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: up2date-gnome-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-2.8.34-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm Red Hat Enterprise Linux WS version 2.1: SRPMS: i386: Available from Red Hat Network: up2date-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: up2date-gnome-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-2.8.34-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm 7. Verification: MD5 sum Package Name --------------------------------------------------------------------------e10930d8965ac2a685e1482ba8c0e9af 2.1AS/en/os/SRPMS/rhn_register-2.8.34-1.2.1AS.src.rpm 5e64b82944c7ccd62986551c3244cb6f 2.1AS/en/os/SRPMS/up2date-2.8.45-1.2.1AS.src.rpm e3362186968d6e6da916a967d8d3655f 2.1AS/en/os/i386/rhn_register-2.8.34-1.2.1AS.i386.rpm 019b32631452559245ce70e26f2ed928 2.1AS/en/os/i386/rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm 42f3379722023af4412c79e686a04c89 2.1AS/en/os/i386/up2date-2.8.45-1.2.1AS.i386.rpm b0897084ce6ba6e4ae15ffa070739776 2.1AS/en/os/i386/up2date-gnome-2.8.45-1.2.1AS.i386.rpm 88b85b602b3651cc3364b992c8e99f04 2.1AS/en/os/ia64/rhn_register-2.8.34-1.2.1AS.ia64.rpm fdd03e41d5eb74d520a6f0d8cb969fba 2.1AS/en/os/ia64/rhn_register-gnome-2.8.34-1.2.1AS.ia64.rpm fdf5c0ca850486b13288287e8d776e16 2.1AS/en/os/ia64/up2date-2.8.45-1.2.1AS.ia64.rpm 296d91a647c0ac255fe77e4a2b602d0a2.1AS/en/os/ia64/up2date-gnome-2.8.45-1.2.1AS.ia64.rpm e10930d8965ac2a685e1482ba8c0e9af 2.1AW/en/os/SRPMS/rhn_register-2.8.34-1.2.1AS.src.rpm 5e64b82944c7ccd62986551c3244cb6f 2.1AW/en/os/SRPMS/up2date-2.8.45-1.2.1AS.src.rpm 88b85b602b3651cc3364b992c8e99f04 2.1AW/en/os/ia64/rhn_register-2.8.34-1.2.1AS.ia64.rpm fdd03e41d5eb74d520a6f0d8cb969fba 2.1AW/en/os/ia64/rhn_register-gnome-2.8.34-1.2.1AS.ia64.rpm fdf5c0ca850486b13288287e8d776e16 2.1AW/en/os/ia64/up2date-2.8.45-1.2.1AS.ia64.rpm 296d91a647c0ac255fe77e4a2b602d0a 2.1AW/en/os/ia64/up2date-gnome-2.8.45-1.2.1AS.ia64.rpm e10930d8965ac2a685e1482ba8c0e9af 2.1ES/en/os/SRPMS/rhn_register-2.8.34-1.2.1AS.src.rpm 5e64b82944c7ccd62986551c3244cb6f 2.1ES/en/os/SRPMS/up2date-2.8.45-1.2.1AS.src.rpm e3362186968d6e6da916a967d8d3655f 2.1ES/en/os/i386/rhn_register-2.8.34-1.2.1AS.i386.rpm 019b32631452559245ce70e26f2ed928 2.1ES/en/os/i386/rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm 42f3379722023af4412c79e686a04c89 2.1ES/en/os/i386/up2date-2.8.45-1.2.1AS.i386.rpm b0897084ce6ba6e4ae15ffa070739776 2.1ES/en/os/i386/up2date-gnome-2.8.45-1.2.1AS.i386.rpm e10930d8965ac2a685e1482ba8c0e9af 2.1WS/en/os/SRPMS/rhn_register-2.8.34-1.2.1AS.src.rpm 5e64b82944c7ccd62986551c3244cb6f 2.1WS/en/os/SRPMS/up2date-2.8.45-1.2.1AS.src.rpm e3362186968d6e6da916a967d8d3655f 2.1WS/en/os/i386/rhn_register-2.8.34-1.2.1AS.i386.rpm 019b32631452559245ce70e26f2ed928 2.1WS/en/os/i386/rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm 42f3379722023af4412c79e686a04c89 2.1WS/en/os/i386/up2date-2.8.45-1.2.1AS.i386.rpm b0897084ce6ba6e4ae15ffa070739776 2.1WS/en/os/i386/up2date-gnome-2.8.45-1.2.1AS.i386.rpm These packages are GPG signed by Red Hat for security. Our key is available at https://www.redhat.com/en/products You can verify each package with the following command: rpm --checksig -v If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: md5sum 8. Contact: The Red Hat securitycontact is . More contact details at https://www.redhat.com/en/products Copyright 2003 Red Hat, Inc. . Updated up2date and rhn_register tools for Red Hat 2.1 to address severe connectivity issues and enhance performance.. Red Hat Security, Up2date Connectivity, Network Update. . Severity: Important. LinuxSecurity.com Team
Jun 08, 2023
•Important
Red Hat
89
security advisorymoderateupdateFedora 36: FEDORA-2022-b60ea83571 Moderate: Gajim Jabber Client Update
Update Gajim to 1.5.1 (and python-nbxmpp to 3.2.2). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-b60ea83571 2022-09-29 03:23:26.542394 --------------------------------------------------------------------------------Name : gajim Product : Fedora 36 Version : 1.5.1 Release : 1.fc36 URL : https://gajim.org/ Summary : Jabber client written in PyGTK Description : Gajim is a Jabber client written in PyGTK. The goal of Gajim's developers is to provide a full featured and easy to use xmpp client for the GTK+ users. Gajim does not require GNOME to run, even though it exists with it nicely. --------------------------------------------------------------------------------Update Information: Update Gajim to 1.5.1 (and python-nbxmpp to 3.2.2) --------------------------------------------------------------------------------ChangeLog: * Mon Sep 19 2022 Michael Kuhn - 1.5.1-1 - Update to 1.5.1 * Mon Sep 19 2022 Michael Kuhn - 1.5.0-1 - Update to 1.5.0 - CVE-2022-39835 --------------------------------------------------------------------------------References: [ 1 ] Bug #2122047 - python-nbxmpp-3.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2122047 [ 2 ] Bug #2128097 - gajim-1.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2128097 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-b60ea83571' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Sep 28, 2022
Fedora
89
security advisorymoderateFedoraFedora 34: FEDORA-2022-1822067a06 Moderate: Thunderbird Client Update
Update to latest upstream version.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-1822067a06 2022-03-11 14:14:50.963111 --------------------------------------------------------------------------------Name : thunderbird Product : Fedora 34 Version : 91.6.2 Release : 1.fc34 URL : https://wiki.mozilla.org/Thunderbird:Home_Page Summary : Mozilla Thunderbird mail/newsgroup client Description : Mozilla Thunderbird is a standalone mail and newsgroup client. --------------------------------------------------------------------------------Update Information: Update to latest upstream version. --------------------------------------------------------------------------------ChangeLog: * Mon Mar 7 2022 Jan Horak - 91.6.2-1 - Update to 91.6.2 * Mon Feb 28 2022 Jan Horak - 91.6.1-1 - Update to 91.6.1 build1 * Fri Feb 11 2022 Jan Horak - 91.6.0-2 - Supply stock icon to the appdata file * Wed Feb 9 2022 Jan Horak - 91.6.0-1 - Update to 91.6.0 build1 * Wed Feb 9 2022 Jan Horak - 91.5.0-3 - Put appdata.xml to medainfo location * Sat Jan 22 2022 Fedora Release Engineering - 91.5.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-1822067a06' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 11, 2022
Fedora
98
security advisorysecurity issueRed HatRedHat: RHSA-2021-4765 Moderate: OpenShift Serverless Client 1.19.0 Release
Release of OpenShift Serverless Client kn 1.19.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Release of OpenShift Serverless Client kn 1.19.0 Advisory ID: RHSA-2021:4765-01 Product: Red Hat OpenShift Serverless Advisory URL: https://access.redhat.com/errata/RHSA-2021:4765 Issue date: 2021-11-23 CVE Names: CVE-2021-36221 ==================================================================== 1. Summary: Release of OpenShift Serverless Client kn 1.19.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Openshift Serverless 1 on RHEL 8Base - ppc64le, s390x, x86_64 3. Description: Red Hat OpenShift Serverless Client kn 1.19.0 provides a CLI to interact with Red Hat OpenShift Serverless 1.19.0. The kn CLI is delivered as an RPM package for installation on RHEL platforms, and as binaries for non-Linux platforms. Security Fix(es): * golang: net/http/httputil: panic due to racy read of persistConn after handler panic (CVE-2021-36221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: See the Red Hat OpenShift Container Platform 4.6 documentation at: https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 See the Red Hat OpenShift Container Platform 4.7 documentationat: https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 See the Red Hat OpenShift Container Platform 4.8 documentation at: https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 See the Red Hat OpenShift Container Platform 4.9 documentation at: https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 5. Bugs fixed (https://bugzilla.redhat.com/): 1995656 - CVE-2021-36221 golang: net/http/httputil: panic due to racy read of persistConn after handler panic 2016255 - Release of Openshift Serverless Client 1.19.0 6. Package List: Openshift Serverless 1 on RHEL 8Base: Source: openshift-serverless-clients-0.25.1-1.el8.src.rpm ppc64le: openshift-serverless-clients-0.25.1-1.el8.ppc64le.rpm s390x: openshift-serverless-clients-0.25.1-1.el8.s390x.rpm x86_64: openshift-serverless-clients-0.25.1-1.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-36221 https://access.redhat.com/security/updates/classification#moderate https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYZz9oNzjgjWX9erEAQhjew/9EeAac0uiyEFP58IN3qHHpbt0x3iv2Sc8 dI5/d9sh1KZ9H7VEm00eSnDkeCofUzP7cseTAOcpk5cQ/22hO3yfDZqnZE6ORNYw VwVreCFcsMfDhnEPsanEaT1395dH8o3uFqx9o9C+qedhJFabfYNN7CVtVRW1H6xg NOqAhjv56YJh9bLkdytwzOsDfb7eU8WLoNusqKZCVJixFbBdTSMkyCAETVyDhl8p 8dSUDNHIhK+o7QwUScPzrAH5jiT4VKQgZVaVAH4NDtcYHaoG2pcdqCHIuTY49N7R ZZo3mEZBxaeuZXchJ2CxGPLqanOXn78TdILVHbZ5inbXaZ9aMDjfzEZkVRCNssBW d7Nxl5bRAqzgNwjbrKHls2ssBxe1F8X6t/5yOtBdZGVmDgXZGSl2/U2yaO9kA2Qv 7GRagWTKJAv9APoaj2ILarUO+Gf410G4Cpc0OEN45Glp7tqW/PpI65B4fEZGnhFH 37kLzeTHm+aOpLcxyCc3I3uVrTtD23mf7vwUj3O8AURQRng8WwymWxOuza7Eo2iz rX46zJF9TOxeGcHJ3Ykl9BDR3gQh6pQ9ccTjFFz0vrev8X7YHbhUvDDgGmK/5xya voswqaVuwD37RjzmF7t65PC+XOyt9A++Vo2/XfbUfkRLIgytx+UkQa7CjGDd8nvu /YGicfc9BgQ=TWiE -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Nov 23, 2021
Red Hat
89
security advisorymoderatesoftware updateFedora: 2021-3db6876545 Moderate: libpq Client Library Update
Update to the latest upstream release.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-3db6876545 2021-02-26 01:08:09.396888 --------------------------------------------------------------------------------Name : libpq Product : Fedora 32 Version : 12.6 Release : 1.fc32 URL : https://www.postgresql.org/ Summary : PostgreSQL client library Description : The libpq package provides the essential shared library for any PostgreSQL client program or interface. You will need to install this package to use any other PostgreSQL package or any clients that need to connect to a PostgreSQL server. --------------------------------------------------------------------------------Update Information: Update to the latest upstream release. --------------------------------------------------------------------------------ChangeLog: * Tue Feb 16 2021 Honza Horak - 12.6-1 - Update to 12.6 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-3db6876545' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 25, 2021
Fedora
98
security advisoryRed Hat Enterprise LinuxMozillaRed Hat: 7 Important: Thunderbird Update Security Issues
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: thunderbird security update Advisory ID: RHSA-2021:0661-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:0661 Issue date: 2021-02-24 CVE Names: CVE-2021-23968 CVE-2021-23969 CVE-2021-23973 CVE-2021-23978 ==================================================================== 1. Summary: An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64le, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.8.0. Security Fix(es): * Mozilla: Content Security Policy violation report could have contained the destination of a redirect (CVE-2021-23968) * Mozilla: Content Security Policy violation report could have contained the destination of a redirect (CVE-2021-23969) * Mozilla: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 (CVE-2021-23978) * Mozilla: MediaError message property could have leaked information about cross-origin resources (CVE-2021-23973) For moredetails about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1932109 - CVE-2021-23969 Mozilla: Content Security Policy violation report could have contained the destination of a redirect 1932110 - CVE-2021-23968 Mozilla: Content Security Policy violation report could have contained the destination of a redirect 1932111 - CVE-2021-23973 Mozilla: MediaError message property could have leaked information about cross-origin resources 1932112 - CVE-2021-23978 Mozilla: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: thunderbird-78.8.0-1.el7_9.src.rpm x86_64: thunderbird-78.8.0-1.el7_9.x86_64.rpm thunderbird-debuginfo-78.8.0-1.el7_9.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): Source: thunderbird-78.8.0-1.el7_9.src.rpm ppc64le: thunderbird-78.8.0-1.el7_9.ppc64le.rpm thunderbird-debuginfo-78.8.0-1.el7_9.ppc64le.rpm x86_64: thunderbird-78.8.0-1.el7_9.x86_64.rpm thunderbird-debuginfo-78.8.0-1.el7_9.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: thunderbird-78.8.0-1.el7_9.src.rpm x86_64: thunderbird-78.8.0-1.el7_9.x86_64.rpm thunderbird-debuginfo-78.8.0-1.el7_9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2021-23968 https://access.redhat.com/security/cve/CVE-2021-23969 https://access.redhat.com/security/cve/CVE-2021-23973 https://access.redhat.com/security/cve/CVE-2021-23978 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYDZ4E9zjgjWX9erEAQhj2A/+InFXkTs3DbcxgUJ3Y5gpV0dEH2Z5tTra tWKLZNL2LH/TlGs9bg2N1C/ikaoT7u9/idRuQZYajXAJ9ATXVqinF55EzWUPw64J NqOooyNphFjgE3udlemNOrjW02OM+eUgMnT3VPWRG/YQdHHsc65lbhA/aQOMUC2D iGar5RkVnPx9gH99mrAVv+UjH2XOwo6y/GEiZgGlaELayWFZw3YYg4RFzN8VrAgt MBMst4gP/6r7Fm/EhkQKOOS/dRvJlBUM+dIxEd2m0Q2uYKw4JEfnPJCCgdXzw6Va 4yPVTJiQefafOB2g/+42PuHKH8TP+Y/aNbUlddAdW7nuolyV744hwU+JpVSz8aku bwkIuHK3X3Ezgaz6Pl6AgslvKtjNKnb4n/gbEoxwm7nAcC8OsSPJrifwMVKy8dcW ApxA0W7IIFD9mWkFVshhKn6n4wZOBACHi1PV87iEQJaOFXnmNBQOTFYx1X31Pt/G 4dfdJ92ibNLuAysAYXl7ZGKInvHqK2+ikowKjU4CC2/9Cs2eNgrHY0n8BL7P2U+R VTUunHsEnofKCB150Pg+/B3pgbyD9mENuel9BA8X0AUzKOorMw7Tr07Vs367bAs1 mJZHifAz+SYrhXuYZdKi+QMdpDpIERsauLg9fZb7UNwSbOJ7VvWt8oM8cf2lvuEc nQgp3YsR7q0=E0zZ -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Feb 24, 2021
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!