Synopsis:          Important: thunderbird security update

Advisory ID:       SLSA-2017:0498-1

Issue Date:        2017-03-14

CVE Numbers:       CVE-2017-5400

                   CVE-2017-5401

                   CVE-2017-5402

                   CVE-2017-5404

                   CVE-2017-5407

                   CVE-2017-5410

                   CVE-2017-5408

                   CVE-2017-5405

                   CVE-2017-5398

--



This update upgrades Thunderbird to version 45.8.0.



Security Fix(es):



* Multiple flaws were found in the processing of malformed web content. A

web page containing malicious content could cause Thunderbird to crash or,

potentially, execute arbitrary code with the privileges of the user

running Thunderbird. (CVE-2017-5398, CVE-2017-5400, CVE-2017-5401,

CVE-2017-5402, CVE-2017-5404, CVE-2017-5407, CVE-2017-5408, CVE-2017-5410,

CVE-2017-5405)

--



SL5

  x86_64

    thunderbird-45.8.0-1.el5_11.x86_64.rpm

    thunderbird-debuginfo-45.8.0-1.el5_11.x86_64.rpm

  i386

    thunderbird-45.8.0-1.el5_11.i386.rpm

    thunderbird-debuginfo-45.8.0-1.el5_11.i386.rpm

SL6

  x86_64

    thunderbird-45.8.0-1.el6_8.x86_64.rpm

    thunderbird-debuginfo-45.8.0-1.el6_8.x86_64.rpm

  i386

    thunderbird-45.8.0-1.el6_8.i686.rpm

    thunderbird-debuginfo-45.8.0-1.el6_8.i686.rpm

SL7

  x86_64

    thunderbird-45.8.0-1.el7_3.x86_64.rpm

    thunderbird-debuginfo-45.8.0-1.el7_3.x86_64.rpm



- Scientific Linux Development Team