Lucene search

K
suseSuseOPENSUSE-SU-2020:1392-1
HistorySep 09, 2020 - 12:00 a.m.

Security update for MozillaThunderbird (important)

2020-09-0900:00:00
lists.opensuse.org
42

0.007 Low

EPSS

Percentile

80.2%

An update that fixes three vulnerabilities is now available.

Description:

This update for MozillaThunderbird fixes the following issues:

  • Mozilla Thunderbird was updated to 68.12 (bsc#1175686)

  • CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service
    could have resulted in escalation of privilege

  • CVE-2020-15664: Attacker-induced prompt for extension installation

  • CVE-2020-15669: Use-After-Free when aborting an operation

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.2:

    zypper in -t patch openSUSE-2020-1392=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.2x86_64< - openSUSE Leap 15.2 (x86_64):- openSUSE Leap 15.2 (x86_64):.x86_64.rpm