RHSA-2022:0845: Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.This update upgrades Thunderbird to version 91.7.0.Security Fix(es): Mozilla: Use-after-free in XSLT parameter processing (CVE-2022-26485) Mozilla: Use-after-free in WebGPU IPC Framework (CVE-2022-26486) expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235) expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution (CVE-2022-25236) expat: Integer overflow in storeRawNames() (CVE-2022-25315) Mozilla: Use-after-free in text reflows (CVE-2022-26381) Mozilla: Browser window spoof using fullscreen mode (CVE-2022-26383) Mozilla: iframe allow-scripts sandbox bypass (CVE-2022-26384) Mozilla: Time-of-check time-of-use bug when verifying add-on signatures (CVE-2022-26387) thunderbird: Crafted email could trigger an out-of-bounds write (CVE-2022-0566) Mozilla: Temporary files downloaded to /tmp and accessible by other local users (CVE-2022-26386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:0845?
The severity of RHSA-2022:0845 is classified as critical due to the use-after-free vulnerabilities that can lead to code execution.
How do I fix RHSA-2022:0845?
You can fix RHSA-2022:0845 by upgrading to Mozilla Thunderbird version 91.7.0-2.el8_5.
What vulnerabilities are addressed in RHSA-2022:0845?
RHSA-2022:0845 addresses use-after-free vulnerabilities in XSLT parameter processing and WebGPU IPC Framework.
Which versions of Thunderbird are affected by RHSA-2022:0845?
Versions of Thunderbird prior to 91.7.0-2.el8_5 are affected by RHSA-2022:0845.
Is there a way to verify if my Thunderbird is affected by RHSA-2022:0845?
You can verify if your Thunderbird is affected by checking its version against the fixed version of 91.7.0-2.el8_5.