Red Hat Product Errata RHSA-2020:5164 - Security Advisory
Issued:
2020-11-23
Updated:
2020-11-23

RHSA-2020:5164 - Security Advisory

Synopsis

Important: thunderbird security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for thunderbird is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 78.4.3.

Security Fix(es):

  • Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of Thunderbird must be restarted for the update to take effect.

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

  • BZ - 1896306 - CVE-2020-26950 Mozilla: Write side effects in MCallGetProperty opcode not accounted for

Red Hat Enterprise Linux Server 6

SRPM
thunderbird-78.4.3-1.el6_10.src.rpm SHA-256: 3ce6f184c5e5af5f525f35f0c95dfaf2fbad164789e1212139d094b903d86004
x86_64
thunderbird-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1bc7dbe5ca9f054e0f7503268f13aeca08f09f73214af470326c75474908ed8b
thunderbird-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1bc7dbe5ca9f054e0f7503268f13aeca08f09f73214af470326c75474908ed8b
thunderbird-debuginfo-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1402bb9e435f1549af9069f1c07823c27a45ba7af2fd48f223f586033396e98e
i386
thunderbird-78.4.3-1.el6_10.i686.rpm SHA-256: 902279130cb356f1747f1bf8a269b0933071f1411f839b480b3b0a8953a9e972

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
thunderbird-78.4.3-1.el6_10.src.rpm SHA-256: 3ce6f184c5e5af5f525f35f0c95dfaf2fbad164789e1212139d094b903d86004
x86_64
thunderbird-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1bc7dbe5ca9f054e0f7503268f13aeca08f09f73214af470326c75474908ed8b
thunderbird-debuginfo-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1402bb9e435f1549af9069f1c07823c27a45ba7af2fd48f223f586033396e98e
i386
thunderbird-78.4.3-1.el6_10.i686.rpm SHA-256: 902279130cb356f1747f1bf8a269b0933071f1411f839b480b3b0a8953a9e972

Red Hat Enterprise Linux Workstation 6

SRPM
thunderbird-78.4.3-1.el6_10.src.rpm SHA-256: 3ce6f184c5e5af5f525f35f0c95dfaf2fbad164789e1212139d094b903d86004
x86_64
thunderbird-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1bc7dbe5ca9f054e0f7503268f13aeca08f09f73214af470326c75474908ed8b
thunderbird-debuginfo-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1402bb9e435f1549af9069f1c07823c27a45ba7af2fd48f223f586033396e98e
i386
thunderbird-78.4.3-1.el6_10.i686.rpm SHA-256: 902279130cb356f1747f1bf8a269b0933071f1411f839b480b3b0a8953a9e972

Red Hat Enterprise Linux Desktop 6

SRPM
thunderbird-78.4.3-1.el6_10.src.rpm SHA-256: 3ce6f184c5e5af5f525f35f0c95dfaf2fbad164789e1212139d094b903d86004
x86_64
thunderbird-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1bc7dbe5ca9f054e0f7503268f13aeca08f09f73214af470326c75474908ed8b
thunderbird-debuginfo-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1402bb9e435f1549af9069f1c07823c27a45ba7af2fd48f223f586033396e98e
i386
thunderbird-78.4.3-1.el6_10.i686.rpm SHA-256: 902279130cb356f1747f1bf8a269b0933071f1411f839b480b3b0a8953a9e972

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
thunderbird-78.4.3-1.el6_10.src.rpm SHA-256: 3ce6f184c5e5af5f525f35f0c95dfaf2fbad164789e1212139d094b903d86004
s390x
thunderbird-78.4.3-1.el6_10.s390x.rpm SHA-256: b387a317ae08da23121b21984aed7ea25ee19ed99c495d4ee641df374ef791dd
thunderbird-debuginfo-78.4.3-1.el6_10.s390x.rpm SHA-256: 960579889fe30a1a8e533b596758b401a0d5ebf1b343508050b84316fbb7b271

Red Hat Enterprise Linux for Power, big endian 6

SRPM
thunderbird-78.4.3-1.el6_10.src.rpm SHA-256: 3ce6f184c5e5af5f525f35f0c95dfaf2fbad164789e1212139d094b903d86004
ppc64
thunderbird-78.4.3-1.el6_10.ppc64.rpm SHA-256: 610d5f3b4f9da2518ae188cc0ab8df7a5d5521279a8c772cd0ab574b1739cf8b
thunderbird-debuginfo-78.4.3-1.el6_10.ppc64.rpm SHA-256: b3d95753246fae97b5f1ed533a7aad77e5a26af6c61143c84bf7a832953512a1

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
thunderbird-78.4.3-1.el6_10.src.rpm SHA-256: 3ce6f184c5e5af5f525f35f0c95dfaf2fbad164789e1212139d094b903d86004
s390x
thunderbird-78.4.3-1.el6_10.s390x.rpm SHA-256: b387a317ae08da23121b21984aed7ea25ee19ed99c495d4ee641df374ef791dd
thunderbird-debuginfo-78.4.3-1.el6_10.s390x.rpm SHA-256: 960579889fe30a1a8e533b596758b401a0d5ebf1b343508050b84316fbb7b271

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
thunderbird-78.4.3-1.el6_10.src.rpm SHA-256: 3ce6f184c5e5af5f525f35f0c95dfaf2fbad164789e1212139d094b903d86004
x86_64
thunderbird-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1bc7dbe5ca9f054e0f7503268f13aeca08f09f73214af470326c75474908ed8b
thunderbird-debuginfo-78.4.3-1.el6_10.x86_64.rpm SHA-256: 1402bb9e435f1549af9069f1c07823c27a45ba7af2fd48f223f586033396e98e
i386
thunderbird-78.4.3-1.el6_10.i686.rpm SHA-256: 902279130cb356f1747f1bf8a269b0933071f1411f839b480b3b0a8953a9e972

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6

SRPM
thunderbird-78.4.3-1.el6_10.src.rpm SHA-256: 3ce6f184c5e5af5f525f35f0c95dfaf2fbad164789e1212139d094b903d86004
s390x
thunderbird-78.4.3-1.el6_10.s390x.rpm SHA-256: b387a317ae08da23121b21984aed7ea25ee19ed99c495d4ee641df374ef791dd
thunderbird-debuginfo-78.4.3-1.el6_10.s390x.rpm SHA-256: 960579889fe30a1a8e533b596758b401a0d5ebf1b343508050b84316fbb7b271

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.