Lucene search
SuseOPENSUSE-SU-2020:0366-1HistoryMar 22, 2020 - 12:00 a.m.
Security update for MozillaThunderbird (important)
2020-03-2200:00:00
lists.opensuse.org
56
mozillathunderbird
update
vulnerabilities
use-after-free
command injection
memory safety bugs
suse
EPSS
0.526
Percentile
97.6%
An update that fixes 7 vulnerabilities is now available.
Description:
This update for MozillaThunderbird fixes the following issues:
MozillaThunderbird was updated to 68.6.0 ESR (MFSA 2020-10 bsc#1166238)
- CVE-2020-6805: Fixed a use-after-free when removing data about origins
- CVE-2020-6806: Fixed improper protections against state confusion
- CVE-2020-6807: Fixed a use-after-free in cubeb during stream destruction
- CVE-2020-6811: Fixed an issue where copy as cURL’ feature did not fully
escape website-controlled data potentially leading to command injection - CVE-2019-20503: Fixed out of bounds reads in
sctp_load_addresses_from_init - CVE-2020-6812: Fixed an issue where the names of AirPods with personally
identifiable information were exposed to websites with camera or
microphone permission - CVE-2020-6814: Fixed multiple memory safety bugs
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.1:
zypper in -t patch openSUSE-2020-366=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 15.1 | x86_64 | < - openSUSE Leap 15.1 (x86_64): | - openSUSE Leap 15.1 (x86_64):.x86_64.rpm |
Related
nessus
nessus
CentOS 8 : firefox (CESA-2020:0820)
2021-02-01 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-2020-366)
2020-03-23 00:00:00
Debian DLA-2150-1 : thunderbird security update
2020-03-23 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0142)
2022-01-28 00:00:00
openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2020:0366-1)
2020-03-23 00:00:00
CentOS: Security Advisory for thunderbird (CESA-2020:0914)
2020-03-26 00:00:00
redhat
redhat
(RHSA-2020:0918) Important: thunderbird security update
2020-03-23 07:49:11
(RHSA-2020:0914) Important: thunderbird security update
2020-03-23 07:29:42
(RHSA-2020:0816) Important: firefox security update
2020-03-16 08:03:23
osv
osv
thunderbird - security update
2020-03-19 00:00:00
firefox-esr - security update
2020-03-11 00:00:00
firefox-esr - security update
2020-03-11 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2020-03-14 00:00:00
archlinux
archlinux
[ASA-202003-11] thunderbird: multiple issues
2020-03-16 00:00:00
[ASA-202003-8] firefox: multiple issues
2020-03-11 00:00:00
kaspersky
kaspersky
KLA11701 Multiple vulnerabilities in Mozilla Thunderbird
2020-03-10 00:00:00
KLA11688 Multiple vulnerabilities in Mozilla Firefox ESR
2020-03-10 00:00:00
KLA11691 Multiple vulnerabilities in Mozilla Firefox
2020-02-12 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2020-03-23 00:00:00
firefox security update
2020-03-17 00:00:00
thunderbird security update
2020-03-20 00:00:00
debian
debian
[SECURITY] [DLA 2150-1] thunderbird security update
2020-03-20 10:00:10
[SECURITY] [DSA 4639-1] firefox-esr security update
2020-03-11 19:17:38
[SECURITY] [DLA 2140-1] firefox-esr security update
2020-03-11 21:34:36
centos
centos
firefox security update
2020-03-25 19:17:41
thunderbird security update
2020-03-25 19:17:21
firefox security update
2020-03-25 19:19:48
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2020-03-14 11:35:35
Updated firefox packages fix security vulnerabilities
2020-03-14 11:35:35
amazon
amazon
Important: thunderbird
2020-04-20 20:48:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 68.6 — Mozilla
2020-03-10 00:00:00
Security Vulnerabilities fixed in Firefox ESR 68.6 — Mozilla
2020-03-10 00:00:00
Security Vulnerabilities fixed in Firefox 74 — Mozilla
2020-03-10 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 68.6.0-alt1
2020-03-10 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 68.6.0-alt1
2020-03-14 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2020-03-10 20:37:32
[slackware-security] mozilla-thunderbird
2020-03-13 21:47:41
ubuntu
ubuntu
Firefox vulnerabilities
2020-03-11 00:00:00
Thunderbird vulnerabilities
2020-04-13 00:00:00
threatpost
threatpost
Firefox Bug Opens iPhone AirPods to Third-Party Snooping
2020-03-10 18:14:15
Firefox Bug Opens iPhone AirPods to Third-Party Snooping
2020-03-10 18:14:15
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2020-03-12 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2020-03-14 00:00:00
redhatcve
redhatcve
alpinelinux
alpinelinux
prion
prion
Design/Logic Flaw
2020-03-25 22:15:00
Design/Logic Flaw
2020-03-25 22:15:00
Design/Logic Flaw
2020-03-25 22:15:00
cve
cve
veracode
veracode
Information Disclosure
2020-03-18 00:55:41
Denial Of Service (DoS)
2020-03-18 00:55:39
Denial Of Service (DoS)
2020-03-18 00:55:39
cvelist
cvelist
debiancve
debiancve
nvd
nvd
ubuntucve
ubuntucve
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Memory Corruption (CVE-2020-6806)
2020-12-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1
2024-03-19 17:21:46
CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1
2022-06-26 03:29:33