What is RHSA-2020:1488?

RHSA-2020:1488 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: thunderbird security update

Which CVE IDs does RHSA-2020:1488 cover?

RHSA-2020:1488 covers the following CVE IDs: CVE-2020-6822, CVE-2020-6825, CVE-2020-6819, CVE-2020-6820, CVE-2020-6821. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2020:1488?

RHSA-2020:1488 has a CVSS v3 base score of 9.8, published by Red Hat Product Security.

Which products are affected by RHSA-2020:1488?

RHSA-2020:1488 affects 22 products, including: Red Hat Enterprise Linux Desktop (v. 6); Red Hat Enterprise Linux Server Optional (v. 6); Red Hat Enterprise Linux Workstation (v. 6); thunderbird-0:68.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6); thunderbird-0:68.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6); and others — see the full list on the advisory page.

RHSA-2020:1488: Red Hat Security Advisory: t…

🔗 CVE IDs covered (5)

CVE-2020-6822 →CVE-2020-6825 →CVE-2020-6819 →CVE-2020-6820 →CVE-2020-6821 →

📋 Description

CVE-2020-6819 — Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6820 — Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6821 — Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6822 — Mozilla: Out of bounds write in GMPDecodeData when processing large images CVE-2020-6825 — Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7

🎯 Affected products22

Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux Server Optional (v. 6)
Red Hat Enterprise Linux Workstation (v. 6)
thunderbird-0:68.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
thunderbird-0:68.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
thunderbird-0:68.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
thunderbird-0:68.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
thunderbird-0:68.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)
thunderbird-0:68.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
thunderbird-0:68.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)
thunderbird-0:68.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
thunderbird-0:68.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
thunderbird-0:68.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
thunderbird-0:68.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
thunderbird-debuginfo-0:68.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
thunderbird-debuginfo-0:68.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
thunderbird-debuginfo-0:68.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
thunderbird-debuginfo-0:68.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
thunderbird-debuginfo-0:68.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)
thunderbird-debuginfo-0:68.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
thunderbird-debuginfo-0:68.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
thunderbird-debuginfo-0:68.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.

🔗 CVE IDs covered (5)

📋 Description

🎯 Affected products22

✅ Remediation

🔗 References (9)