High ELSA-2020-4163 4 CVEs

Important: thunderbird security update (Oracle Linux 7)

Published Oct 13, 2020 · Updated Oct 13, 2020

Ecosystem: Oracle Linux

Summary

[78.3.1-1.0.1]
- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

[78.3.1-1]
- Update to 78.3.1 build1

[78.3.0-3]
- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL

[78.2.1-1]
- Update to 78.2.1 build1

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	thunderbird	0:78.3.1-1.0.1.el7_9

Vulnerabilities 4

Unscored —

CVE-2020-15673

Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed ev…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 1, 2020
Unscored —

CVE-2020-15676

Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaSc…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 1, 2020
Unscored —

CVE-2020-15677

By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the dow…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 1, 2020
Unscored —

CVE-2020-15678

When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 1, 2020