ALT-PU-2020-2876

Высокий

ALT-PU-2020-2876: package thunderbird update to version 78.3.0-alt1

Источник

errata.altlinux.org

Дата публикации

25.09.2020

Дата обновления

25.09.2020

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades thunderbird to version 78.3.0-alt1.

Устраненные уязвимости4

CVE-2020-15673

Высокий 8.8

Дата публикации: 01.10.2020

CWE-416

Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.

CVSS 3.1

Высокий 8.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Средний 6.8

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2020-15673 https://nvd.nist.gov/vuln/detail/CVE-2020-15673

Ссылки1

ALT-PU-2020-2876 https://errata.altlinux.org/ALT-PU-2020-2876

Связанные уязвимости