RLSA-2022:4887

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.10.0.

Security Fix(es):

• Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email (CVE-2022-1834)

• Mozilla: Cross-Origin resource's length leaked (CVE-2022-31736)

• Mozilla: Heap buffer overflow in WebGL (CVE-2022-31737)

• Mozilla: Browser window spoof using fullscreen mode (CVE-2022-31738)

• Mozilla: Register allocation problem in WASM on arm64 (CVE-2022-31740)

• Mozilla: Uninitialized variable leads to invalid memory read (CVE-2022-31741)

• Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10 (CVE-2022-31747)

• Mozilla: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information (CVE-2022-31742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.