Lucene search
CentOS ProjectCESA-2020:1488HistoryApr 28, 2020 - 12:21 a.m.
thunderbird security update
2020-04-2800:21:12
CentOS Project
lists.centos.org
105
0.024 Low
EPSS
Percentile
89.8%
CentOS Errata and Security Advisory CESA-2020:1488
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 68.7.0.
Security Fix(es):
-
Mozilla: Use-after-free while running the nsDocShell destructor (CVE-2020-6819)
-
Mozilla: Use-after-free when handling a ReadableStream (CVE-2020-6820)
-
Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method (CVE-2020-6821)
-
Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7 (CVE-2020-6825)
-
Mozilla: Out of bounds write in GMPDecodeData when processing large images (CVE-2020-6822)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2020-April/085822.html
Affected packages:
thunderbird
Upstream details at:
https://access.redhat.com/errata/RHSA-2020:1488
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| CentOS | 6 | i686 | thunderbird | < 68.7.0-1.el6.centos | thunderbird-68.7.0-1.el6.centos.i686.rpm |
| CentOS | 6 | x86_64 | thunderbird | < 68.7.0-1.el6.centos | thunderbird-68.7.0-1.el6.centos.x86_64.rpm |
Related
nessus
nessus
CentOS 7 : thunderbird (CESA-2020:1489)
2020-05-01 00:00:00
RHEL 8 : thunderbird (RHSA-2020:1495)
2020-04-16 00:00:00
RHEL 8 : thunderbird (RHSA-2020:1496)
2020-04-16 00:00:00
osv
osv
thunderbird - security update
2020-04-14 00:00:00
firefox-esr - security update
2020-04-08 00:00:00
thunderbird - security update
2020-04-13 00:00:00
debian
debian
[SECURITY] [DLA 2170-1] firefox-esr security update
2020-04-08 11:36:36
[SECURITY] [DSA 4656-1] thunderbird security update
2020-04-13 19:43:18
[SECURITY] [DLA 2172-1] thunderbird security update
2020-04-14 10:27:52
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0170)
2022-01-28 00:00:00
CentOS: Security Advisory for thunderbird (CESA-2020:1489)
2020-05-01 00:00:00
Debian: Security Advisory (DSA-4656-1)
2020-04-14 00:00:00
redhat
redhat
(RHSA-2020:1488) Important: thunderbird security update
2020-04-16 09:13:38
(RHSA-2020:1496) Important: thunderbird security update
2020-04-16 20:08:29
(RHSA-2020:1495) Important: thunderbird security update
2020-04-16 20:07:30
kaspersky
kaspersky
KLA11730 Multiple vulnerabilities in Mozilla Thunderbird
2020-04-09 00:00:00
KLA11712 Multiple vulnerabilities in Mozilla Firefox ESR
2020-04-03 00:00:00
KLA11711 Multiple vulnerabilities in Mozilla Firefox
2020-04-03 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 68.7.0-alt1
2020-04-08 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 68.6.1-alt1
2020-04-04 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 68.7.0-alt1
2020-04-06 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 68.7.0 — Mozilla
2020-04-09 00:00:00
Security Vulnerabilities fixed in Firefox 74.0.1 and Firefox ESR 68.6.1 — Mozilla
2020-04-03 00:00:00
Security Vulnerabilities fixed in Firefox ESR 68.7 — Mozilla
2020-04-07 00:00:00
suse
suse
Security update for MozillaThunderbird (important)
2020-04-23 00:00:00
Security update for MozillaThunderbird (important)
2020-04-15 00:00:00
Security update for MozillaFirefox (critical)
2020-04-06 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2020-04-17 00:00:00
thunderbird security update
2020-07-07 00:00:00
thunderbird security update
2020-04-18 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2020-04-15 13:12:14
Updated firefox packages fix security vulnerabilities
2020-04-08 20:12:00
Updated firefox packages fix security vulnerabilities
2020-04-05 20:07:15
centos
centos
thunderbird security update
2020-04-30 19:57:02
firefox security update
2020-04-28 00:22:09
firefox security update
2020-04-08 15:31:17
archlinux
archlinux
[ASA-202004-12] thunderbird: multiple issues
2020-04-13 00:00:00
[ASA-202004-6] firefox: arbitrary code execution
2020-04-04 00:00:00
[ASA-202004-8] firefox: multiple issues
2020-04-08 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2020-04-04 00:08:09
[slackware-security] mozilla-firefox
2020-04-07 22:50:22
ubuntu
ubuntu
Firefox vulnerabilities
2020-04-04 00:00:00
Firefox vulnerabilities
2020-04-07 00:00:00
threatpost
threatpost
Firefox Zero-Day Flaws Exploited in the Wild Get Patched
2020-04-04 13:28:43
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2020-04-04 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2020-04-23 00:00:00
amazon
amazon
Critical: thunderbird
2020-05-19 18:32:00
prion
prion
Out-of-bounds
2020-04-24 16:15:00
Memory corruption
2020-04-24 16:15:00
redhatcve
redhatcve
ubuntucve
ubuntucve
debiancve
debiancve
CVE-2020-6822
2020-04-24 16:15:00
CVE-2020-6821
2020-04-24 16:15:00
alpinelinux
alpinelinux
cve
cve
CVE-2020-6821
2020-04-24 16:15:00
CVE-2020-6820
2020-04-24 16:15:00
cvelist
cvelist
CVE-2020-6819
2020-04-24 15:56:56
veracode
veracode
Denial Of Service (DoS)
2020-04-08 00:44:27
Denial Of Service (DoS)
2020-04-09 01:07:00
Information Disclosure
2020-04-09 01:06:59
cisa_kev
cisa_kev
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
2021-11-03 00:00:00
attackerkb
attackerkb
CVE-2020-6820
2020-04-24 00:00:00