Read the docs
Red Hat Security Advisory

RHSA-2020:1404

firefox security update

Released 2020-04-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2020-05534 CVE-2020-6825 · GHSA-pj8r-w3xr-j4w5

Out-of-bounds write in Mozilla Thunderbird

Priority MEDIUM 46

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02188 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-787
TI-2020-05531 CVE-2020-6822 · GHSA-v2mh-4gcf-6ghr

Out-of-bounds write in Mozilla Thunderbird

Priority MEDIUM 41

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecodeData</code>.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01325 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-787
TI-2020-05530 CVE-2020-6821 · GHSA-jj5p-vxx9-rvj7

Use of uninitialized resource in Mozilla Thunderbird

Priority LOW 36

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the returned values be zero.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01505 Published 2020-04-24 Partial fix · 68.7.0, 68.7 +1 CWE-908