Red Hat Security Advisory

RHSA-2020:3631

thunderbird security update

Released 2020-09-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) thunderbird-68.12.0-1.el7_8
Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-68.12.0-1.el7_8
Red Hat Enterprise Linux Workstation (v. 7) thunderbird-68.12.0-1.el7_8

Fixes 2 records

TI-2020-12344 CVE-2020-15669 · GHSA-8vqh-gxqj-vj4q

Use after free in Mozilla Firefox ESR

MEDIUM 40

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01119 Published 2020-10-01 Partial fix · 68.12 CWE-416

TI-2020-12339 CVE-2020-15664 · GHSA-f4gc-pc7j-rfxr

Incorrect authorization in Mozilla Firefox

LOW 32

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01389 Published 2020-10-01 Partial fix · 80, 78.2 +1 CWE-863