Synopsis: Important: thunderbird security update Advisory ID: SLSA-2019:0269-1 Issue Date: 2019-02-04 CVE Numbers: CVE-2018-18500 CVE-2018-18501 CVE-2018-18505 CVE-2016-5824 -- This update upgrades Thunderbird to version 60.5.0. Security Fix(es): * Mozilla: Use-after-free parsing HTML5 stream (CVE-2018-18500) * Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 (CVE-2018-18501) * Mozilla: Privilege escalation through IPC channel messages (CVE-2018-18505) * libical: Multiple use-after-free vulnerabilities (CVE-2016-5824) -- SL6 x86_64 thunderbird-60.5.0-1.el6_10.x86_64.rpm thunderbird-debuginfo-60.5.0-1.el6_10.x86_64.rpm i386 thunderbird-60.5.0-1.el6_10.i686.rpm thunderbird-debuginfo-60.5.0-1.el6_10.i686.rpm - Scientific Linux Development Team