Test Kennung:	1.3.6.1.4.1.25623.1.0.883312
Kategorie:	CentOS Local Security Checks
Titel:	CentOS: Security Advisory for thunderbird (CESA-2020:5618)
Zusammenfassung:	The remote host is missing an update for the 'thunderbird'; package(s) announced via the CESA-2020:5618 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'thunderbird' package(s) announced via the CESA-2020:5618 advisory. Vulnerability Insight: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.6.0. Security Fix(es): * chromium-browser: Uninitialized Use in V8 (CVE-2020-16042) * Mozilla: Heap buffer overflow in WebGL (CVE-2020-26971) * Mozilla: CSS Sanitizer performed incorrect sanitization (CVE-2020-26973) * Mozilla: Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free (CVE-2020-26974) * Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6 (CVE-2020-35113) * Mozilla: Internal network hosts could have been probed by a malicious webpage (CVE-2020-26978) * Mozilla: The proxy.onRequest API did not catch view-source URLs (CVE-2020-35111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: 'thunderbird' package(s) on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-16042 https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html https://crbug.com/1151890 Common Vulnerability Exposure (CVE) ID: CVE-2020-26971 https://bugzilla.mozilla.org/show_bug.cgi?id=1663466 https://www.mozilla.org/security/advisories/mfsa2020-54/ https://www.mozilla.org/security/advisories/mfsa2020-55/ https://www.mozilla.org/security/advisories/mfsa2020-56/ Common Vulnerability Exposure (CVE) ID: CVE-2020-26973 https://bugzilla.mozilla.org/show_bug.cgi?id=1680084 Common Vulnerability Exposure (CVE) ID: CVE-2020-26974 https://bugzilla.mozilla.org/show_bug.cgi?id=1681022 Common Vulnerability Exposure (CVE) ID: CVE-2020-26978 https://bugzilla.mozilla.org/show_bug.cgi?id=1677047 Common Vulnerability Exposure (CVE) ID: CVE-2020-35111 https://bugzilla.mozilla.org/show_bug.cgi?id=1657916 Common Vulnerability Exposure (CVE) ID: CVE-2020-35113 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1664831%2C1673589
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.