Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2020-0170 Moderate: Thunderbird Security Update Summary

mageia
Calendar Grey April 15, 2020
Dist Mageia Esm H88
Mageia 2020-0171 tackles severe vulnerabilities in Firefox related to memory integrity and improper release of resources.

The updated packages fix security vulnerabilities: Use-after-free while running the nsDocShell destructor

Summary

The updated packages fix security vulnerabilities:
Use-after-free while running the nsDocShell destructor. (CVE-2020-6819)
Use-after-free when handling a ReadableStream. (CVE-2020-6820)
Uninitialized memory could be read when using the WebGL copyTexSubImage method. (CVE-2020-6821)
Out of bounds write in GMPDecodeData when processing large images. (CVE-2020-6822)
Memory safety bugs fixed in Thunderbird 68.7.0. (CVE-2020-6825)

References

- https://bugs.mageia.org/show_bug.cgi?id=26455

- https://www.thunderbird.net/en-US/thunderbird/68.7.0/releasenotes/

- https://www.mozilla.org/en-US/security/advisories/mfsa2020-14/

- https://enigmail.net/index.php/en/download/changelog#enig2.1.6

- https://www.cve.org/CVERecord?id=CVE-2020-6819

- https://www.cve.org/CVERecord?id=CVE-2020-6820

- https://www.cve.org/CVERecord?id=CVE-2020-6821

- https://www.cve.org/CVERecord?id=CVE-2020-6822

- https://www.cve.org/CVERecord?id=CVE-2020-6825

Topics%20covered

Topics Covered

security advisory thunderbird image processing memory safety use-after-free webgl Mageia

Resolution

SRPMS

- 7/core/thunderbird-68.7.0-1.mga7

- 7/core/thunderbird-l10n-68.7.0-1.mga7

Publication date: 15 Apr 2020
URL: https://advisories.mageia.org/MGASA-2020-0170.html
Type: security
CVE: CVE-2020-6819, CVE-2020-6820, CVE-2020-6821, CVE-2020-6822, CVE-2020-6825

Topics%20covered

Topics Covered

security advisory thunderbird image processing memory safety use-after-free webgl Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here