Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 7: MGASA-2020-0320 Moderate: Thunderbird Data Leak & Memory Safety

mageia
Calendar Grey August 18, 2020
Dist Mageia Esm H88
Revised Thunderbird builds mitigate risks of leaks and safeguard memory vulnerabilities, essential for Mageia 7 adopters.
Potential leak of redirect targets when loading scripts in a worker

Summary

Potential leak of redirect targets when loading scripts in a worker. (CVE-2020-15652)
WebRTC data channel leaks internal address to peer. (CVE-2020-6514)
Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture. (CVE-2020-6463)
Memory safety bugs fixed in Thunderbird 68.11. (CVE-2020-15659)

References

- https://bugs.mageia.org/show_bug.cgi?id=27025

- https://www.thunderbird.net/en-US/thunderbird/68.11.0/releasenotes/

- https://www.mozilla.org/en-US/security/advisories/mfsa2020-35/

- https://access.redhat.com/errata/RHSA-2020:3344

- https://www.cve.org/CVERecord?id=CVE-2020-6463

- https://www.cve.org/CVERecord?id=CVE-2020-6514

- https://www.cve.org/CVERecord?id=CVE-2020-15652

- https://www.cve.org/CVERecord?id=CVE-2020-15659

Topics%20covered

Topics Covered

security advisory thunderbird memory safety data leak script issue mageia webRTC

Resolution

SRPMS

- 7/core/thunderbird-68.11.0-1.mga7

- 7/core/thunderbird-l10n-68.11.0-1.mga7

Publication date: 18 Aug 2020
URL: https://advisories.mageia.org/MGASA-2020-0320.html
Type: security
CVE: CVE-2020-6463, CVE-2020-6514, CVE-2020-15652, CVE-2020-15659

Topics%20covered

Topics Covered

security advisory thunderbird memory safety data leak script issue mageia webRTC

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here