High 1 exploited CVE ELSA-2020-0127 5 CVEs

Important: thunderbird security update (Oracle Linux 8)

Published Jan 18, 2020 · Updated Jan 18, 2020

Ecosystem: Oracle Linux

Summary

[68.4.1-2.0.1.el8_1]
- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

[68.4.1-2]
- Update to 68.4.1 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	thunderbird	0:68.4.1-2.0.1.el8_1

Vulnerabilities 5

High 8.8

CVE-2019-17026 Exploited Public exploit EPSS 46%

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Mar 2, 2020
KEV Nov 3, 2021
Unscored —

CVE-2019-17016

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @…

Mozilla Firefox Firefox ESR thunderbird Browsers Debian Ubuntu Alpine

Jan 8, 2020
Unscored —

CVE-2019-17017

Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presu…

Mozilla Firefox Firefox ESR thunderbird Browsers Debian Ubuntu Alpine

Jan 8, 2020
Unscored —

CVE-2019-17022

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and…

Mozilla Firefox Firefox ESR thunderbird Browsers Debian Ubuntu Alpine

Jan 8, 2020
Unscored —

CVE-2019-17024

Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed ev…

Mozilla Firefox Firefox ESR thunderbird Browsers Debian Ubuntu Alpine

Jan 8, 2020