Synopsis

Important: thunderbird security update

Type/Severity

Security Advisory: Important

Topic

An update for thunderbird is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 68.12.0.

Security Fix(es):

• Mozilla: Attacker-induced prompt for extension installation (CVE-2020-15664)
  
• Mozilla: Use-After-Free when aborting an operation (CVE-2020-15669)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of Thunderbird must be restarted for the update to take effect.

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64

Fixes

• BZ - 1872531 - CVE-2020-15664 Mozilla: Attacker-induced prompt for extension installation
• BZ - 1872532 - CVE-2020-15669 Mozilla: Use-After-Free when aborting an operation

CVEs

• CVE-2020-15664
• CVE-2020-15669

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 6

SRPM
thunderbird-68.12.0-1.el6_10.src.rpm	SHA-256: a7bd034e6ae1cf7485ef47a6aa923e2dc914ca1f1406f5e43c1cdadb0bf4a38b
x86_64
thunderbird-68.12.0-1.el6_10.x86_64.rpm	SHA-256: e63aba2d6322e4d6457fab2fcf67ac685d2a3006aa8fe7078a905b9d18c2dd4a
thunderbird-debuginfo-68.12.0-1.el6_10.x86_64.rpm	SHA-256: a0072c15ec6c42c1af51fee47e7d86dbb6c5d5435d34169c179b440d431aafa5
i386
thunderbird-68.12.0-1.el6_10.i686.rpm	SHA-256: 090db5638fd4bc74d2286dd1af270a68aac96f523d243a0fd10f111c571c7da6
thunderbird-debuginfo-68.12.0-1.el6_10.i686.rpm	SHA-256: 467bc1661cf82e7d91b44da1fd7200b0c57ab95219f7b8ded48ba0a10b5683ba

Red Hat Enterprise Linux Workstation 6

SRPM
thunderbird-68.12.0-1.el6_10.src.rpm	SHA-256: a7bd034e6ae1cf7485ef47a6aa923e2dc914ca1f1406f5e43c1cdadb0bf4a38b
x86_64
thunderbird-68.12.0-1.el6_10.x86_64.rpm	SHA-256: e63aba2d6322e4d6457fab2fcf67ac685d2a3006aa8fe7078a905b9d18c2dd4a
thunderbird-debuginfo-68.12.0-1.el6_10.x86_64.rpm	SHA-256: a0072c15ec6c42c1af51fee47e7d86dbb6c5d5435d34169c179b440d431aafa5
i386
thunderbird-68.12.0-1.el6_10.i686.rpm	SHA-256: 090db5638fd4bc74d2286dd1af270a68aac96f523d243a0fd10f111c571c7da6
thunderbird-debuginfo-68.12.0-1.el6_10.i686.rpm	SHA-256: 467bc1661cf82e7d91b44da1fd7200b0c57ab95219f7b8ded48ba0a10b5683ba

Red Hat Enterprise Linux Desktop 6

SRPM
thunderbird-68.12.0-1.el6_10.src.rpm	SHA-256: a7bd034e6ae1cf7485ef47a6aa923e2dc914ca1f1406f5e43c1cdadb0bf4a38b
x86_64
thunderbird-68.12.0-1.el6_10.x86_64.rpm	SHA-256: e63aba2d6322e4d6457fab2fcf67ac685d2a3006aa8fe7078a905b9d18c2dd4a
thunderbird-debuginfo-68.12.0-1.el6_10.x86_64.rpm	SHA-256: a0072c15ec6c42c1af51fee47e7d86dbb6c5d5435d34169c179b440d431aafa5
i386
thunderbird-68.12.0-1.el6_10.i686.rpm	SHA-256: 090db5638fd4bc74d2286dd1af270a68aac96f523d243a0fd10f111c571c7da6
thunderbird-debuginfo-68.12.0-1.el6_10.i686.rpm	SHA-256: 467bc1661cf82e7d91b44da1fd7200b0c57ab95219f7b8ded48ba0a10b5683ba

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
thunderbird-68.12.0-1.el6_10.src.rpm	SHA-256: a7bd034e6ae1cf7485ef47a6aa923e2dc914ca1f1406f5e43c1cdadb0bf4a38b
s390x
thunderbird-68.12.0-1.el6_10.s390x.rpm	SHA-256: a91345eef8a991aa547c4883ebfa93c873b52b177a5ae29c2679d77795abb594
thunderbird-debuginfo-68.12.0-1.el6_10.s390x.rpm	SHA-256: a2694b90b65f3d7770270ec37417f2a638d14bc23c0a110b63eb162544d0c2b2

Red Hat Enterprise Linux for Power, big endian 6

SRPM
thunderbird-68.12.0-1.el6_10.src.rpm	SHA-256: a7bd034e6ae1cf7485ef47a6aa923e2dc914ca1f1406f5e43c1cdadb0bf4a38b
ppc64
thunderbird-68.12.0-1.el6_10.ppc64.rpm	SHA-256: 2bc2cc0247b035f8299902e121e652ba8f63d281ca731a31913aef91e1d18f5b
thunderbird-debuginfo-68.12.0-1.el6_10.ppc64.rpm	SHA-256: 1ecd733e683de9c643bd44ee828d8747ee520174baefd0d0c6ebfd85cd3525ef