Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/thunderbird@68.12.0-1
purl pkg:alpm/archlinux/thunderbird@68.12.0-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (9)
Vulnerability Summary Aliases
VCID-14gr-rfym-5yha Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-6463
VCID-6h7s-a74e-33c1 Mozilla developer Anne van Kesteren discovered that <iframe sandbox> with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content. CVE-2020-15653
VCID-9tc4-qr6d-6kfu When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work. CVE-2020-15654
VCID-ak2m-xsvt-eqbs Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-15652
VCID-awnf-jwg6-k3bk Mozilla Developer Rob Wu discovered that a redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. CVE-2020-15655
VCID-f8fw-f3kt-8feb Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code. CVE-2020-6514
VCID-h4r6-jrxh-6kcf JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. CVE-2020-15656
VCID-jtyr-jd5m-87c3 Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-15659
VCID-qhwf-9n5n-hbaa The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. CVE-2020-15658

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:25:48.436359+00:00 Arch Linux Importer Fixing VCID-ak2m-xsvt-eqbs https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.415132+00:00 Arch Linux Importer Fixing VCID-6h7s-a74e-33c1 https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.392707+00:00 Arch Linux Importer Fixing VCID-9tc4-qr6d-6kfu https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.370001+00:00 Arch Linux Importer Fixing VCID-awnf-jwg6-k3bk https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.348955+00:00 Arch Linux Importer Fixing VCID-h4r6-jrxh-6kcf https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.323928+00:00 Arch Linux Importer Fixing VCID-qhwf-9n5n-hbaa https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.300039+00:00 Arch Linux Importer Fixing VCID-jtyr-jd5m-87c3 https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.278140+00:00 Arch Linux Importer Fixing VCID-14gr-rfym-5yha https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.254995+00:00 Arch Linux Importer Fixing VCID-f8fw-f3kt-8feb https://security.archlinux.org/AVG-1214 38.0.0