Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity issue

Mageia 7 MGASA-2021-0027 Moderate: Thunderbird Use-After-Free Threat

Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk. (CVE-2020-16044) See upstream releasenotes for other changes. References: . MGASA-2021-0027 - Updated thunderbird packages fix a security vulnerability Publication date: 14 Jan 2021 URL: https://advisories.mageia.org/MGASA-2021-0027.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk. (CVE-2020-16044) See upstream releasenotes for other changes. References: - https://bugs.mageia.org/show_bug.cgi?id=28069 - https://www.mozilla.org/en-US/security/advisories/mfsa2021-02/ - https://www.thunderbird.net/en-US/thunderbird/78.6.1/releasenotes/ - https://www.cve.org/CVERecord?id=CVE-2020-16044 SRPMS: - 7/core/thunderbird-78.6.1-1.mga7 - 7/core/thunderbird-l10n-78.6.1-1.mga7 . MGASA-2021-0028 updates firefox packages to address a vulnerability related to buffer overflow in handling crafted web content.. thunderbird update, mageia advisory, use-after-free exploit, security flaw, software patch. . LinuxSecurity.com Team

Jan 14, 2021 Mageia