[ALAS2-2021-1594] Amazon Linux 2 2017.12 - ALAS2-2021-1594: critical priority package update for thunderbird
Severity
Critical
Affected Packages
4
CVEs
1
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities:
CVE-2020-16044:
No description is available for this CVE.
1913503: CVE-2020-16044 Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk
| Package | Affected Version |
|---|---|
 pkg:rpm/amazonlinux/thunderbird?arch=x86_64&distro=amazonlinux-2
|
< 78.6.1-1.amzn2 |
|
pkg:rpm/amazonlinux/thunderbird?arch=aarch64&distro=amazonlinux-2
|
< 78.6.1-1.amzn2 |
|
pkg:rpm/amazonlinux/thunderbird-debuginfo?arch=x86_64&distro=amazonlinux-2
|
< 78.6.1-1.amzn2 |
|
pkg:rpm/amazonlinux/thunderbird-debuginfo?arch=aarch64&distro=amazonlinux-2
|
< 78.6.1-1.amzn2 |
- ID
- ALAS2-2021-1594
- Severity
- critical
- URL
- https://alas.aws.amazon.com/AL2/ALAS-2021-1594.html
- Published
-
2021-01-25T23:10:00
(3 years ago) - Modified
-
2021-01-26T18:44:00
(3 years ago) - Rights
- Amazon Linux Security Team
- Other Advisories
-
-
ALPINE:CVE-2020-16044
-
ASA-202101-17
-
ASA-202101-5
-
ASA-202102-4
-
ASA-202102-5
-
DSA-4827-1
-
DSA-4842-1
-
DSA-4846-1
-
ELSA-2021-0052
-
ELSA-2021-0053
-
ELSA-2021-0087
-
ELSA-2021-0089
-
FEDORA-2021-48866282e5
-
FEDORA-2021-b7cc24375b
-
FREEBSD:4ED0E43C-5CEF-11EB-BAFD-3065EC8FD3EC
-
GLSA-202101-04
-
GLSA-202101-13
-
GLSA-202101-14
-
MFSA-2021-01
-
MFSA-2021-02
-
MS:CVE-2020-16044
-
openSUSE-SU-2021:0056-1
-
openSUSE-SU-2021:0063-1
-
openSUSE-SU-2021:0093-1
-
openSUSE-SU-2021:0127-1
-
openSUSE-SU-2021:0166-1
-
openSUSE-SU-2021:0173-1
-
openSUSE-SU-2021:0177-1
-
openSUSE-SU-2021:0186-1
-
openSUSE-SU-2021:0973-1
-
openSUSE-SU-2021:1016-1
-
RHSA-2021:0052
-
RHSA-2021:0053
-
RHSA-2021:0087
-
RHSA-2021:0089
-
SUSE-SU-2021:0071-1
-
SUSE-SU-2021:0072-1
-
SUSE-SU-2021:0080-1
-
SUSE-SU-2021:0122-1
-
SUSE-SU-2021:0123-1
-
USN-4687-1
-
USN-4701-1
-
| Source | # ID | Name | URL |
|---|---|---|---|
| CVE | CVE-2020-16044 |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/amazonlinux/thunderbird?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
thunderbird
|
< 78.6.1-1.amzn2 | amazonlinux-2 | x86_64 | |
| Affected | pkg:rpm/amazonlinux/thunderbird?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
thunderbird
|
< 78.6.1-1.amzn2 | amazonlinux-2 | aarch64 | |
| Affected | pkg:rpm/amazonlinux/thunderbird-debuginfo?arch=x86_64&distro=amazonlinux-2 | amazonlinux |
thunderbird-debuginfo
|
< 78.6.1-1.amzn2 | amazonlinux-2 | x86_64 | |
| Affected | pkg:rpm/amazonlinux/thunderbird-debuginfo?arch=aarch64&distro=amazonlinux-2 | amazonlinux |
thunderbird-debuginfo
|
< 78.6.1-1.amzn2 | amazonlinux-2 | aarch64 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |