Red Hat Security Advisory: thunderbird security update

Fixed packages 3

Vulnerabilities 4

• Unscored —
  CVE-2020-15673

  Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed ev…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Oct 1, 2020
• Unscored —
  CVE-2020-15676

  Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaSc…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Oct 1, 2020
• Unscored —
  CVE-2020-15677

  By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the dow…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Oct 1, 2020
• Unscored —
  CVE-2020-15678

  When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Oct 1, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1881664
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1881665
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1881666
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1881667
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4157.json
• report
  https://access.redhat.com/security/cve/CVE-2020-15673
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-15673
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-15673
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15673
• report
  https://access.redhat.com/security/cve/CVE-2020-15676
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-15676
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-15676
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15676
• report
  https://access.redhat.com/security/cve/CVE-2020-15677
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-15677
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-15677
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15677
• report
  https://access.redhat.com/security/cve/CVE-2020-15678
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-15678
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-15678
• article
  https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15678