High 2 exploited CVEs ELSA-2020-1489 5 CVEs

Important: thunderbird security update (Oracle Linux 7)

Published Apr 17, 2020 · Updated Apr 17, 2020

Ecosystem: Oracle Linux

Summary

[68.7.0-1.0.1]
- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

[68.7.0-1]
- Update to 68.7.0 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	thunderbird	0:68.7.0-1.0.1.el7_8

Vulnerabilities 5

High 8.1

CVE-2020-6819 Exploited

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
KEV Nov 3, 2021
High 8.1

CVE-2020-6820 Exploited

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-6821

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
Unscored —

CVE-2020-6822

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
Unscored —

CVE-2020-6825

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020