Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2020:0721-1 Important: MozillaThunderbird Security Patch

suse
Calendar Grey March 19, 2020
Dist Suse Esm H88
SUSE has announced a Security Update for Mozilla Thunderbird that tackles significant vulnerabilities and resolves 7 critical issues.
An update that fixes 7 vulnerabilities is now available

Summary

This update for MozillaThunderbird fixes the following issues: MozillaThunderbird was updated to 68.6.0 ESR (MFSA 2020-10 bsc#1166238) - CVE-2020-6805: Fixed a use-after-free when removing data about origins - CVE-2020-6806: Fixed improper protections against state confusion - CVE-2020-6807: Fixed a use-after-free in cubeb during stream destruction - CVE-2020-6811: Fixed an issue where copy as cURL' feature did not fully escape website-controlled data potentially leading to command injection - CVE-2019-20503: Fixed out of bounds reads in sctp_load_addresses_from_init - CVE-2020-6812: Fixed an issue where the names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission - CVE-2020-6814: Fixed multiple memory safety bugs Patch Instructions:

Topics%20covered

Topics Covered

security advisory critical important SUSE Linux command injection memory safety Mozilla Thunderbird

References

#1166238

Cross- CVE-2019-20503 CVE-2020-6805 CVE-2020-6806

CVE-2020-6807 CVE-2020-6811 CVE-2020-6812

CVE-2020-6814

Affected Products:

SUSE Linux Enterprise Workstation Extension 15-SP1

https://www.suse.com/security/cve/CVE-2019-20503.html

https://www.suse.com/security/cve/CVE-2020-6805.html

https://www.suse.com/security/cve/CVE-2020-6806.html

https://www.suse.com/security/cve/CVE-2020-6807.html

https://www.suse.com/security/cve/CVE-2020-6811.html

https://www.suse.com/security/cve/CVE-2020-6812.html

https://www.suse.com/security/cve/CVE-2020-6814.html

https://bugzilla.suse.com/1166238

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:0721-1
Rating: important

Topics%20covered

Topics Covered

security advisory critical important SUSE Linux command injection memory safety Mozilla Thunderbird

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here