Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 5

• High 8.1
  CVE-2020-6819 Exploited

  Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020

  KEV Nov 3, 2021
• High 8.1
  CVE-2020-6820 Exploited

  Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020

  KEV Nov 3, 2021
• Unscored —
  CVE-2020-6821

  When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020
• Unscored —
  CVE-2020-6822

  On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020
• Unscored —
  CVE-2020-6825

  Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Apr 24, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-14/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1820869
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1820878
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1821674
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1821676
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1821682
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1495.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6819
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6819
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6819
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/#CVE-2020-6819
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2020-6820
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6820
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6820
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/#CVE-2020-6820
• report
  https://access.redhat.com/security/cve/CVE-2020-6821
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6821
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6821
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-13/#CVE-2020-6821
• report
  https://access.redhat.com/security/cve/CVE-2020-6822
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6822
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6822
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-13/#CVE-2020-6822
• report
  https://access.redhat.com/security/cve/CVE-2020-6825
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6825
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6825
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-13/#CVE-2020-6825