ID

VAR-202011-0444

CVE

CVE-2020-15969

TITLE

Google Chrome Resource Management Error Vulnerability

DESCRIPTION

Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome has security holes. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: thunderbird security update Advisory ID: RHSA-2020:4947-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:4947 Issue date: 2020-11-05 CVE Names: CVE-2020-15683 CVE-2020-15969 ==================================================================== 1. Summary: An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.4.0. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 (CVE-2020-15683) * chromium-browser: Use after free in WebRTC (CVE-2020-15969) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1885885 - CVE-2020-15969 chromium-browser: Use after free in WebRTC 1889932 - CVE-2020-15683 Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: thunderbird-78.4.0-1.el6_10.src.rpm i386: thunderbird-78.4.0-1.el6_10.i686.rpm x86_64: thunderbird-78.4.0-1.el6_10.x86_64.rpm thunderbird-debuginfo-78.4.0-1.el6_10.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): Source: thunderbird-78.4.0-1.el6_10.src.rpm i386: thunderbird-78.4.0-1.el6_10.i686.rpm ppc64: thunderbird-78.4.0-1.el6_10.ppc64.rpm thunderbird-debuginfo-78.4.0-1.el6_10.ppc64.rpm s390x: thunderbird-78.4.0-1.el6_10.s390x.rpm thunderbird-debuginfo-78.4.0-1.el6_10.s390x.rpm x86_64: thunderbird-78.4.0-1.el6_10.x86_64.rpm thunderbird-debuginfo-78.4.0-1.el6_10.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: thunderbird-78.4.0-1.el6_10.src.rpm i386: thunderbird-78.4.0-1.el6_10.i686.rpm x86_64: thunderbird-78.4.0-1.el6_10.i686.rpm thunderbird-78.4.0-1.el6_10.x86_64.rpm thunderbird-debuginfo-78.4.0-1.el6_10.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-15683 https://access.redhat.com/security/cve/CVE-2020-15969 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBX6PGZ9zjgjWX9erEAQicqg/9F7pV3T451oH2gVXrlC9sFg+7c+1ssi33 G8Bx81sTSCrA81eUNNd+TJJxSc6xsMb44c33LTAefJUSfs0HsJH77xOXUj6Ytfh/ iRi7MSZaL5wcm6KNmkVG69bPYUzGP/Q22M3v0EDoWctGE6UdxvNxmmpOZBmYvGnb SW8ZWXsQ2ji6i3AT3CpxGq9X3ErDn22FNCb8WpCLoeCHyCQX3NR3PGXPSc5wdDHB QeURQhEYE2bdZdqsbJGc3pVULkg+kSfeUSZQ3550+RTxUA84jwKdDRenZRfB24Ze 4TowCtY798wO5NmQjUGQaHY4ma+Uae15AulMVxdmJY9e8yKq0xnMn5Mu1MQKE0/u luJQVMHHribBe3bUo4wS6oYklTl/MTVZQ09uO7LBmwZBcfdgHKlkI9qyk32e8uh3 5T6sluWvFWuIPhvEnWnpF8UKz4yWE3y0QyXs73q9FSP5JmDCo8Bv3CjSo2fZQHFq FuZjYDMNtDl35N+9LP1fmODFiu/JfLoHQInbxZRyWrb/QKLBbEetuAxkYHCptkYG Q0KA2P6worM+M7IYr0wtulsMyRYQd7Mu1DW9HFK0O+Uv7KcutL9wswxLRjSNGWBv o2I1kpYD97ZHShTsgik1n3fcFScurvrQVwoV6mWSKgAhtB3s+JqkJtjywzUVR4Qx H9Js/8tmZM0=HXvo -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . 8.1) - aarch64, ppc64le, s390x, x86_64 3. Description: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-12-14-1 iOS 14.3 and iPadOS 14.3 iOS 14.3 and iPadOS 14.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT212003. App Store Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: An enterprise application installation prompt may display the wrong domain Description: A logic issue was addressed with improved state management. CVE-2020-29613: Ryan Pickren (ryanpickren.com) CoreAudio Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2020-27948: JunDong Xie of Ant Security Light-Year Lab FontParser Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An information disclosure issue was addressed with improved state management. CVE-2020-27946: Mateusz Jurczyk of Google Project Zero FontParser Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted font file may lead to arbitrary code execution Description: A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. CVE-2020-27943: Mateusz Jurczyk of Google Project Zero CVE-2020-27944: Mateusz Jurczyk of Google Project Zero ImageIO Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted image may lead to heap corruption Description: An out-of-bounds read was addressed with improved input validation. CVE-2020-29617: XingWei Lin of Ant Security Light-Year Lab CVE-2020-29619: XingWei Lin of Ant Security Light-Year Lab ImageIO Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. CVE-2020-29618: XingWei Lin of Ant Security Light-Year Lab ImageIO Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2020-29611: Ivan Fratric of Google Project Zero Security Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Unauthorized code execution may lead to an authentication policy violation Description: This issue was addressed with improved checks. CVE-2020-27951: Apple WebRTC Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management. CVE-2020-15969: an anonymous researcher Installation note: This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202010-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Chromium, Google Chrome: Multiple vulnerabilities Date: October 17, 2020 Bugs: #747013 ID: 202010-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code. Background ========== Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-client/chromium < 86.0.4240.75 >= 86.0.4240.75 2 www-client/google-chrome < 86.0.4240.75 >= 86.0.4240.75 ------------------------------------------------------------------- 2 affected packages Description =========== Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Chromium users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-client/chromium-86.0.4240.75" All Google Chrome users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-client/google-chrome-86.0.4240.75" References ========== [ 1 ] CVE-2020-15967 https://nvd.nist.gov/vuln/detail/CVE-2020-15967 [ 2 ] CVE-2020-15968 https://nvd.nist.gov/vuln/detail/CVE-2020-15968 [ 3 ] CVE-2020-15969 https://nvd.nist.gov/vuln/detail/CVE-2020-15969 [ 4 ] CVE-2020-15970 https://nvd.nist.gov/vuln/detail/CVE-2020-15970 [ 5 ] CVE-2020-15971 https://nvd.nist.gov/vuln/detail/CVE-2020-15971 [ 6 ] CVE-2020-15972 https://nvd.nist.gov/vuln/detail/CVE-2020-15972 [ 7 ] CVE-2020-15973 https://nvd.nist.gov/vuln/detail/CVE-2020-15973 [ 8 ] CVE-2020-15974 https://nvd.nist.gov/vuln/detail/CVE-2020-15974 [ 9 ] CVE-2020-15975 https://nvd.nist.gov/vuln/detail/CVE-2020-15975 [ 10 ] CVE-2020-15976 https://nvd.nist.gov/vuln/detail/CVE-2020-15976 [ 11 ] CVE-2020-15977 https://nvd.nist.gov/vuln/detail/CVE-2020-15977 [ 12 ] CVE-2020-15978 https://nvd.nist.gov/vuln/detail/CVE-2020-15978 [ 13 ] CVE-2020-15979 https://nvd.nist.gov/vuln/detail/CVE-2020-15979 [ 14 ] CVE-2020-15980 https://nvd.nist.gov/vuln/detail/CVE-2020-15980 [ 15 ] CVE-2020-15981 https://nvd.nist.gov/vuln/detail/CVE-2020-15981 [ 16 ] CVE-2020-15982 https://nvd.nist.gov/vuln/detail/CVE-2020-15982 [ 17 ] CVE-2020-15983 https://nvd.nist.gov/vuln/detail/CVE-2020-15983 [ 18 ] CVE-2020-15984 https://nvd.nist.gov/vuln/detail/CVE-2020-15984 [ 19 ] CVE-2020-15985 https://nvd.nist.gov/vuln/detail/CVE-2020-15985 [ 20 ] CVE-2020-15986 https://nvd.nist.gov/vuln/detail/CVE-2020-15986 [ 21 ] CVE-2020-15987 https://nvd.nist.gov/vuln/detail/CVE-2020-15987 [ 22 ] CVE-2020-15988 https://nvd.nist.gov/vuln/detail/CVE-2020-15988 [ 23 ] CVE-2020-15989 https://nvd.nist.gov/vuln/detail/CVE-2020-15989 [ 24 ] CVE-2020-15990 https://nvd.nist.gov/vuln/detail/CVE-2020-15990 [ 25 ] CVE-2020-15991 https://nvd.nist.gov/vuln/detail/CVE-2020-15991 [ 26 ] CVE-2020-15992 https://nvd.nist.gov/vuln/detail/CVE-2020-15992 [ 27 ] CVE-2020-6557 https://nvd.nist.gov/vuln/detail/CVE-2020-6557 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202010-01 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2020 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5 . 8.2) - aarch64, ppc64le, x86_64 3

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

THREAT TYPE

remote

TYPE

resource management error

PATCH

EXTERNAL IDS

REFERENCES

CREDITS

Gentoo

SOURCES

LAST UPDATE DATE

2026-02-08T20:27:50.781000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE