File _patchinfo of Package patchinfo.15248
<patchinfo incident="15248">
<packager>MSirringhaus</packager>
<issue tracker="bnc" id="1172402">VUL-0: MozillaFirefox/MozillaThunderbird: 68.9ESR / 77 release - MFSA 2020-20 / 2020-21</issue>
<issue tracker="cve" id="2020-12405"/>
<issue tracker="cve" id="2020-12406"/>
<issue tracker="cve" id="2020-12410"/>
<issue tracker="cve" id="2020-12398"/>
<rating>important</rating>
<category>security</category>
<summary>Security update for MozillaThunderbird</summary>
<description>This update for MozillaThunderbird fixes the following issues:
Mozilla Thunderbird 68.9.0 (bsc#1172402)
- CVE-2020-12405: Fixed a use-after-free in SharedWorkerService.
- CVE-2020-12406: Fixed a JavaScript Type confusion with NativeTypes.
- CVE-2020-12410: Fixed multiple memory safety issues
- CVE-2020-12398: Fixed a potential information leak due to security downgrade
with IMAP STARTTLS
- Use a symbolic icon from branding internals
</description>
</patchinfo>