First published: Tue Feb 11 2020(Updated: )
Last updated 24 July 2024
Credit: security@mozilla.org security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Thunderbird | <68.5.0 | |
Mozilla Thunderbird | <68.5 | 68.5 |
debian/thunderbird | 1:115.12.0-1~deb11u1 1:128.5.0esr-1~deb11u1 1:115.16.0esr-1~deb12u1 1:128.5.0esr-1~deb12u1 1:128.5.2esr-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The vulnerability ID for this Thunderbird vulnerability is CVE-2020-6793.
The severity level of CVE-2020-6793 is medium with a CVSS score of 6.5.
Thunderbird versions up to 68.5, Debian Thunderbird packages versions 1:91.12.0-1~deb10u1, 1:115.3.1-1~deb10u1, 1:102.13.1-1~deb11u1, 1:115.3.1-1~deb11u1, 1:102.15.1-1~deb12u1, 1:115.3.1-1~deb12u1, 1:115.3.1-1, Ubuntu Thunderbird packages versions 1:68.7.0+ for Bionic, Eoan, and Xenial, and Thunderbird version 68.5.0 from upstream are affected by CVE-2020-6793.
To fix CVE-2020-6793, update Thunderbird to version 68.6 or later.
You can find more information about CVE-2020-6793 in the following references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1608539), [Mozilla Security Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2020-07/), [Gentoo GLSA](https://security.gentoo.org/glsa/202003-10).