RHSA-2009:1126Medium

Red Hat Security Advisory: thunderbird security update

Published
June 25, 2009
Last Modified
November 21, 2025

🔗 CVE IDs covered (11)

CVE-2009-1303 →CVE-2009-1305 →CVE-2009-1306 →CVE-2009-1307 →CVE-2009-1308 →CVE-2009-1309 →CVE-2009-1392 →CVE-2009-1833 →CVE-2009-1836 →CVE-2009-1838 →CVE-2009-2210 →

📋 Description

CVE-2009-1303 — Firefox 2 and 3 Layout engine crash CVE-2009-1305 — Firefox 2 and 3 JavaScript engine crash CVE-2009-1306 — jar: scheme ignores the content-disposition: header on the inner URI CVE-2009-1307 — view-source: protocol CVE-2009-1308 — Firefox XSS hazard using third-party stylesheets and XBL bindings CVE-2009-1309 — Firefox Same-origin violations in XMLHttpRequest and XPCNativeWrapper.toString CVE-2009-1392 — Firefox browser engine crashes CVE-2009-1833 — Firefox JavaScript engine crashes CVE-2009-1836 — Firefox SSL tampering via non-200 responses to proxy CONNECT requests CVE-2009-1838 — Firefox arbitrary code execution flaw CVE-2009-2210 — Thunderbird mail crash

🎯 Affected products12

  • Red Hat Enterprise Linux Desktop (v. 5 client)
  • Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)
  • thunderbird-0:2.0.0.22-2.el5_3.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • thunderbird-0:2.0.0.22-2.el5_3.i386 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)
  • thunderbird-0:2.0.0.22-2.el5_3.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • thunderbird-0:2.0.0.22-2.el5_3.src as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)
  • thunderbird-0:2.0.0.22-2.el5_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • thunderbird-0:2.0.0.22-2.el5_3.x86_64 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)
  • thunderbird-debuginfo-0:2.0.0.22-2.el5_3.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • thunderbird-debuginfo-0:2.0.0.22-2.el5_3.i386 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)
  • thunderbird-debuginfo-0:2.0.0.22-2.el5_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • thunderbird-debuginfo-0:2.0.0.22-2.el5_3.x86_64 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

🔗 References (14)