{"schemaVersion":3,"id":"OPENSUSE-SU-2020:0231-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for MozillaThunderbird\n\nThis update for MozillaThunderbird fixes the following issues:\n\n- Mozilla Thunderbird 68.5 (bsc#1162777)\n  MFSA 2020-07 (bsc#1163368)\n  * CVE-2020-6793 (bmo#1608539)\n    Out-of-bounds read when processing certain email messages\n  * CVE-2020-6794 (bmo#1606619)\n    Setting a master password post-Thunderbird 52 does not delete\n    unencrypted previously stored passwords\n  * CVE-2020-6795 (bmo#1611105)\n    Crash processing S/MIME messages with multiple signatures\n  * CVE-2020-6797 (bmo#1596668)\n    Extensions granted downloads.open permission could open\n    arbitrary applications on Mac OSX\n  * CVE-2020-6798 (bmo#1602944)\n    Incorrect parsing of template tag could result in JavaScript\n    injection\n  * CVE-2020-6792 (bmo#1609607)\n    Message ID calculcation was based on uninitialized data\n  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,\n    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)\n    Memory safety bugs fixed in Thunderbird 68.5\n\n  * new: Support for Client Identity IMAP/SMTP Service Extension\n    (bmo#1532388)\n  * new: Support for OAuth 2.0 authentication for POP3 accounts\n    (bmo#1538409)\n  * fixed: Status area goes blank during account setup\n    (bmo#1593122)\n  * fixed: Calendar: Could not remove color for default\n    categories (bmo#1584853)\n  * fixed: Calendar: Prevent calendar component loading multiple\n    times (bmo#1606375)\n  * fixed: Calendar: Today pane did not retain width between\n    sessions (bmo#1610207)\n  * unresolved: When upgrading from Thunderbird version 60 to\n    version 68, add-ons are not automatically updated during the\n    upgrade process. They will however be updated during the add-\n    on update check. It is of course possible to reinstall\n    compatible add-ons via the Add-ons Manager or via\n    addons.thunderbird.net. (bmo#1574183)\n  * changed: Calendar: Task and Event tree colours adjusted for\n    the dark theme (bmo#1608344)\n  * fixed: Retrieval of S/MIME certificates from LDAP failed\n    (bmo#1604773)\n  * fixed: Address-parsing crash on some IMAP servers when\n    preference mail.imap.use_envelope_cmd was set (bmo#1609690)\n  * fixed: Incorrect forwarding of HTML messages caused SMTP\n    servers to respond with a timeout (bmo#1222046)\n  * fixed: Calendar: Various parts of the calendar UI stopped\n    working when a second Thunderbird window opened (bmo#1608407)\n\n\nThis update was imported from the SUSE:SLE-15:Update update project.","dates":{"published":"2020-02-18T05:12:00.000Z","modified":"2026-02-04T03:26:00.897Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"MozillaThunderbird&distro=openSUSE Leap 15.1","name":"MozillaThunderbird","label":"MozillaThunderbird&distro=openSUSE Leap 15.1","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE Leap 15.1","purlType":"rpm","versions":[{"text":"< 68.5.0-lp151.2.25.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 68.5.0-lp151.2.25.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N7YWPZQVCFPWDEOU6J3TATNMIGNZ4N6P/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1162777","label":"bugzilla.suse.com/1162777","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1163368","label":"bugzilla.suse.com/1163368","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6792","label":"www.suse.com/security/cve/CVE-2020-6792","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6793","label":"www.suse.com/security/cve/CVE-2020-6793","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6794","label":"www.suse.com/security/cve/CVE-2020-6794","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6795","label":"www.suse.com/security/cve/CVE-2020-6795","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6797","label":"www.suse.com/security/cve/CVE-2020-6797","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6798","label":"www.suse.com/security/cve/CVE-2020-6798","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6800","label":"www.suse.com/security/cve/CVE-2020-6800","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2020-6792","CVE-2020-6793","CVE-2020-6794","CVE-2020-6795","CVE-2020-6797","CVE-2020-6798","CVE-2020-6800"],"downstream":[],"duplicates":[],"related":["CVE-2020-6792","CVE-2020-6793","CVE-2020-6794","CVE-2020-6795","CVE-2020-6797","CVE-2020-6798","CVE-2020-6800"]},"timeline":[{"kind":"published","date":"2020-02-18T05:12:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:26:00.897Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T04:37:02.144Z","stale":false,"partial":false}}