High ELSA-2020-2614 4 CVEs

Important: thunderbird security update (Oracle Linux 8)

Published Jun 23, 2020 · Updated Jun 23, 2020

Ecosystem: Oracle Linux

Summary

[68.9.0-1.0.1.el8_2]
- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

[68.9.0-1]
- Update to 68.9.0 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	thunderbird	0:68.9.0-1.0.1.el8_2

Vulnerabilities 4

Unscored —

CVE-2020-12398

If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderb…

Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12405

When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially explo…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12406

Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12410

Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed ev…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020