Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 5

• Unscored —
  CVE-2020-12387

  A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a po…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  May 26, 2020
• Unscored —
  CVE-2020-12392

  The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  May 26, 2020
• Unscored —
  CVE-2020-12395

  Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some o…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  May 26, 2020
• Unscored —
  CVE-2020-12397

  By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address …

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine
  May 22, 2020
• Unscored —
  CVE-2020-6831

  A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corrupti…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  May 26, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1831761
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1831763
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1831764
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1831765
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1832565
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2048.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6831
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6831
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6831
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-17/#CVE-2020-6831
• report
  https://access.redhat.com/security/cve/CVE-2020-12387
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-12387
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-12387
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-17/#CVE-2020-12387
• report
  https://access.redhat.com/security/cve/CVE-2020-12392
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-12392
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-12392
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-17/#CVE-2020-12392
• report
  https://access.redhat.com/security/cve/CVE-2020-12395
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-12395
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-12395
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-17/#CVE-2020-12395
• report
  https://access.redhat.com/security/cve/CVE-2020-12397
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-12397
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-12397
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-18/#CVE-2020-12397