MGASA-2020-0433: thunderbird Mageia

Vulnerability summary

MGASA-2020-0433 is a vulnerability in thunderbird Mageia with no CVSS score yet.

Timeline

1. 21-11-2020
   PublishedVulnerability first disclosed.
2. 16-04-2026
   Last modifiedVulnerability information updated.

Description

Updated thunderbird packages fix security vulnerabilities Variable time processing of cross-origin images during drawImage calls. (CVE-2020-16012) Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code. (CVE-2020-26951) Fullscreen could be enabled without displaying the security UI. (CVE-2020-26953) XSS through paste (manual and clipboard API). (CVE-2020-26956) Requests intercepted through ServiceWorkers lacked MIME type restrictions. (CVE-2020-26958) Use-after-free in WebRequestService. (CVE-2020-26959) Potential use-after-free in uses of nsTArray. (CVE-2020-26960) DoH did not filter IPv4 mapped IP Addresses. (CVE-2020-26961) Software keyboards may have remembered typed passwords. (CVE-2020-26965) Memory safety bugs fixed in Thunderbird 78.5. (CVE-2020-26968)

No weakness data has been published for this record.