Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

RHEL 8 : thunderbird (RHSA-2020:0565)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0565 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 68.5.0. Security Fixes: Mozilla:...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2020:0231-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix security vulnerabilities: When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents CVE-2020-6792. When processing an email message with an ill-formed envelope, Thunderbird could read data from a random...

MGASA-2020-0091 Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix security vulnerabilities: When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents CVE-2020-6792. When processing an email message with an ill-formed envelope, Thunderbird could read data from a random...

Updated firefox packages fix security vulnerabilities

Updated firefox packages fix security vulnerabilities: Due to a missing bounds check on shared memory read in the parent process, a content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memo...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

OPENSUSE-SU-2020:0230-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.5.0 ESR Fixed: Various stability and security fixes - Mozilla Firefox ESR68.5 MFSA 2020-06 bsc1163368 CVE-2020-6796 bmo1610426 Missing bounds check on shared memory read in the parent process...

RHEL 8 : firefox (RHSA-2020:0512)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0512 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

openSUSE Security Update : MozillaFirefox (openSUSE-2020-230)

This update for MozillaFirefox fixes the following issues : - Firefox Extended Support Release 68.5.0 ESR - Fixed: Various stability and security fixes - Mozilla Firefox ESR68.5 MFSA 2020-06 bsc1163368 - CVE-2020-6796 bmo1610426 Missing bounds check on shared memory read in the parent process -...

RHEL 8 : firefox (RHSA-2020:0519)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0519 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:0383-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 68.5.0 ESR - Fixed: Various stability and security fixes Mozilla Firefox ESR68.5 MFSA 2020-06 bsc1163368 - CVE-2020-6796 bmo1610426 Missing bounds check on shared memory read in the parent process -...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

SUSE-SU-2020:0385-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 68.5 bsc1162777 MFSA 2020-07 bsc1163368 CVE-2020-6793 bmo1608539 Out-of-bounds read when processing certain email messages CVE-2020-6794 bmo1606619 Setting a master password post-Thunderbird 52 does not delete...

Mozilla Firefox 73 Browser Update Fixes High-Severity RCE Bugs

Mozilla has launched the latest version of its Firefox browser, which knocks out high-severity security flaws that leave systems open to attack by a remote adversary. The patched version of Mozilla’s browser, launched on Tuesday, is Firefox 73 and Firefox ESR 68.5. The Firefox ESR browser is its...

Security fix for the ALT Linux 10 package firefox-esr version 68.5.0-alt1

Feb. 12, 2020 Andrey Cherepanov 68.5.0-alt1 - New ESR version 68.5.0. - Fixed: + CVE-2020-6796 Missing bounds check on shared memory read in the parent process + CVE-2020-6797 Extensions granted downloads.open permission could open arbitrary applications on Mac OSX + CVE-2020-6798 Incorrect parsi...

Security fix for the ALT Linux 10 package thunderbird version 68.5.0-alt1

Feb. 12, 2020 Andrey Cherepanov 68.5.0-alt1 - New version 68.5.0. - Fixed: + CVE-2020-6793 Out-of-bounds read when processing certain email messages + CVE-2020-6794 Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords + CVE-2020-6795 Crash processi...

CVE-2020-6800

Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. In general, these flaws...

Security Vulnerabilities fixed in Firefox 73 — Mozilla

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. By downloading a file with the .fileloc extension, a semi-privileged extension...