RHEL 8 : thunderbird (RHSA-2023:0603)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0603 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocati...

RHEL 7 : thunderbird (RHSA-2023:0600)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0600 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocati...

RHEL 9 : thunderbird (RHSA-2023:0608)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0608 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocati...

RHEL 8 : thunderbird (RHSA-2023:0601)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0601 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocati...

RHEL 8 : thunderbird (RHSA-2023:0605)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0605 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocati...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocation status of S/Mime signature certificates was not checked CVE-2023-0430 For more details about the security issues, including the impact, a CVSS...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocation status of S/Mime signature certificates was not checked CVE-2023-0430 For more details about the security issues, including the impact, a CVSS...

Fedora 36 : thunderbird (2023-99ba1917da)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-99ba1917da advisory. Update to 102.7.1 ; https://www.mozilla.org/en-US/security/advisories/mfsa2023-03/ ; https://www.mozilla.org/en-US/security/advisories/mfsa2023-04/ ;...

Fedora 37 : thunderbird (2023-97a977a96a)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-97a977a96a advisory. Update to 102.7.1 ; https://www.mozilla.org/en-US/security/advisories/mfsa2023-03/ ; https://www.mozilla.org/en-US/security/advisories/mfsa2023-04/ ;...

CVE-2023-0430

The Mozilla Foundation Security Advisory describes this flaw as: Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by thi...

Mozilla Thunderbird Security Advisory (MFSA2023-04) - Mac OS X

Thunderbird is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Thunderbird Security Advisory (MFSA2023-04) - Windows

Thunderbird is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2023-032-03)

The version of mozilla-thunderbird installed on the remote host is prior to 102.7.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-032-03 advisory. - Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked...

Mozilla Thunderbird < 102.7.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 102.7.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-04 advisory. - Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked...

Mozilla Thunderbird < 102.7.1

The version of Thunderbird installed on the remote Windows host is prior to 102.7.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-04 advisory. - Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certifica...

Important: Red Hat Security Advisory: libksba security update

An update for libksba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

EulerOS Virtualization 3.0.2.2 : nss (EulerOS-SA-2023-1278)

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA o...

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...

Security Vulnerabilities fixed in Thunderbird 102.7.1 — Mozilla

Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by this bug...

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application for example a malicious S/MIME attachment.

...