Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-15669: No description is available for this CVE. 1872532: CVE-2020-15669 Mozilla: Use-After-Free when aborting an operation CVE-2020-15664: No description is available for this CVE. 1872531: CVE-2020-15664 Mozilla: Attacker-induced prompt for extension installation
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | thunderbird | 0:68.12.0-1.amzn2 |
| Amazon Linux · 2 | thunderbird-debuginfo | 0:68.12.0-1.amzn2 |
Vulnerabilities 2
-
Unscored —
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access …
-
Unscored —
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. …