Lucene search

K
centosCentOS ProjectCESA-2020:5618
HistoryDec 21, 2020 - 8:46 p.m.

thunderbird security update

2020-12-2120:46:06
CentOS Project
lists.centos.org
104

0.004 Low

EPSS

Percentile

72.6%

CentOS Errata and Security Advisory CESA-2020:5618

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 78.6.0.

Security Fix(es):

  • chromium-browser: Uninitialized Use in V8 (CVE-2020-16042)

  • Mozilla: Heap buffer overflow in WebGL (CVE-2020-26971)

  • Mozilla: CSS Sanitizer performed incorrect sanitization (CVE-2020-26973)

  • Mozilla: Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free (CVE-2020-26974)

  • Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6 (CVE-2020-35113)

  • Mozilla: Internal network hosts could have been probed by a malicious webpage (CVE-2020-26978)

  • Mozilla: The proxy.onRequest API did not catch view-source URLs (CVE-2020-35111)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2020-December/086033.html

Affected packages:
thunderbird

Upstream details at:
https://access.redhat.com/errata/RHSA-2020:5618

OSVersionArchitecturePackageVersionFilename
CentOS7x86_64thunderbird< 78.6.0-1.el7.centosthunderbird-78.6.0-1.el7.centos.x86_64.rpm