Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 6

• Unscored —
  CVE-2020-6792

  When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. Th…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine
  Mar 2, 2020
• Unscored —
  CVE-2020-6793

  When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine
  Mar 2, 2020
• Unscored —
  CVE-2020-6794

  If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these pass…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine
  Mar 2, 2020
• Unscored —
  CVE-2020-6795

  When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null poi…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine
  Mar 2, 2020
• Unscored —
  CVE-2020-6798

  If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution whe…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Alpine
  Mar 2, 2020
• Unscored —
  CVE-2020-6800

  Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some o…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Alpine
  Mar 2, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1801918
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1801920
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1801955
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1801956
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1801957
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1801958
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0577.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6792
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6792
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6792
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6792
• report
  https://access.redhat.com/security/cve/CVE-2020-6793
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6793
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6793
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6793
• report
  https://access.redhat.com/security/cve/CVE-2020-6794
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6794
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6794
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6794
• report
  https://access.redhat.com/security/cve/CVE-2020-6795
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6795
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6795
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/#CVE-2020-6795
• report
  https://access.redhat.com/security/cve/CVE-2020-6798
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6798
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6798
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6798
• report
  https://access.redhat.com/security/cve/CVE-2020-6800
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6800
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6800
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6800