This update for MozillaThunderbird to version 68.10.0 ESR fixes the following issues :

  - CVE-2020-12417: Memory corruption due to missing     sign-extension for ValueTags on ARM64 (bsc#1173576).

  - CVE-2020-12418: Information disclosure due to     manipulated URL object (bsc#1173576).

  - CVE-2020-12419: Use-after-free in nsGlobalWindowInner     (bsc#1173576).

  - CVE-2020-12420: Use-After-Free when trying to connect to     a STUN server (bsc#1173576).

  - CVE-2020-12421: Add-On updates did not respect the same     certificate trust rules as software updates     (bsc#1173576).

This update was imported from the SUSE:SLE-15:Update update project.

openSUSE Security Update : MozillaThunderbird (openSUSE-2020-967)

high Nessus Plugin ID 138742

No changelogs found