Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2020:1591-1 Important: MozillaThunderbird Info Leak and Safety Fixes

suse
Calendar Grey June 10, 2020
Dist Suse Esm H88
Critical SUSE Security Patch for MozillaThunderbird tackling multiple vulnerabilities such as memory safety and additional concerns.
An update that fixes four vulnerabilities is now available

Summary

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 68.9.0 (bsc#1172402) - CVE-2020-12405: Fixed a use-after-free in SharedWorkerService. - CVE-2020-12406: Fixed a JavaScript Type confusion with NativeTypes. - CVE-2020-12410: Fixed multiple memory safety issues - CVE-2020-12398: Fixed a potential information leak due to security downgrade with IMAP STARTTLS - Use a symbolic icon from branding internals Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 15-SP1: zypper in -t patch SUSE-SLE-Product-WE-15-SP1-2020-1591=1 Package List:

Topics%20covered

Topics Covered

security advisory information leak SUSE memory safety MozillaThunderbird

References

#1172402

Cross- CVE-2020-12398 CVE-2020-12405 CVE-2020-12406

CVE-2020-12410

Affected Products:

SUSE Linux Enterprise Workstation Extension 15-SP1

https://www.suse.com/security/cve/CVE-2020-12398.html

https://www.suse.com/security/cve/CVE-2020-12405.html

https://www.suse.com/security/cve/CVE-2020-12406.html

https://www.suse.com/security/cve/CVE-2020-12410.html

https://bugzilla.suse.com/1172402

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:1591-1
Rating: important

Topics%20covered

Topics Covered

security advisory information leak SUSE memory safety MozillaThunderbird

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here