Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ebuild/mail-client/thunderbird-bin@128.9.0
purl pkg:ebuild/mail-client/thunderbird-bin@128.9.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (37)
Vulnerability Summary Aliases
VCID-18my-61hh-n3gb Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1934
VCID-1zf8-qjts-9fbc Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11704
VCID-2ejc-7bd5-qkbf Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3028
VCID-2q2k-zuq7-cye9 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3032
VCID-3fpq-jre6-53fs Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11706
VCID-4zjw-4gjw-pqh1 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0242
VCID-5j6z-g7gt-qyea Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11694
VCID-6szy-r2cd-9kfw matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal ### Summary matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the client's homeserver. ### Details The Matrix specification demands homeservers to [perform validation](https://spec.matrix.org/v1.12/client-server-api/#security-considerations-5) of the `server-name` and `media-id` components of MXC URIs with the intent to prevent path traversal. However, it is not mentioned that a similar check must also be performed on the client to prevent *client-side* path traversal. matrix-js-sdk fails to perform this validation. ### Patches Fixed in matrix-js-sdk 34.11.1. ### Workarounds None. ### References - https://spec.matrix.org/v1.12/client-server-api/#security-considerations-5 - https://blog.doyensec.com/2024/07/02/cspt2csrf.html CVE-2024-50336
GHSA-xvg8-m4x3-w6xr
VCID-73bd-e4pc-y7h6 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11708
VCID-769r-8mmt-6qcc Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11705
VCID-7eu3-hxbk-8fd7 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1935
VCID-8k4z-rq29-mqg5 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11697
VCID-8san-ze3j-dqdx Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3030
VCID-95vw-esba-23a2 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1937
VCID-b5t3-yqha-xyeq Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. CVE-2025-26696
VCID-bjny-apx2-8ba1 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11695
VCID-dh5k-q87q-4qfs Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11696
VCID-f1zm-g4es-vfbz Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0239
VCID-g3n8-mvdt-cqdj Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3029
VCID-grjt-j4at-pqbp Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11692
VCID-h261-q8t7-n3cm Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3034
VCID-j5k8-ztxb-uffb Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0238
VCID-kc7w-zjh4-vqfq Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11701
VCID-pcrz-f3nj-kybr Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1938
VCID-qtcm-9z3v-dydn Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0241
VCID-qw3q-xg7s-wbd7 Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. CVE-2025-26695
VCID-qzb8-5u9j-27g1 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11700
VCID-r7ss-g876-c7fg Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0237
VCID-tgpf-32kg-rqc2 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0240
VCID-ukf2-qcjg-u7bg Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0243
VCID-upvn-56py-8ud7 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1933
VCID-w6j3-6a6j-uqf1 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1931
VCID-w7gj-shrq-3fcz Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11699
VCID-x7r6-efsn-sqhx Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3031
VCID-y7sk-dmau-4fam Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1936
VCID-z8cr-rten-qqg2 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1932
VCID-zefw-etrb-z3fu Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-43097

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:14:11.881225+00:00 Gentoo Importer Fixing VCID-b5t3-yqha-xyeq https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.845185+00:00 Gentoo Importer Fixing VCID-qw3q-xg7s-wbd7 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.808371+00:00 Gentoo Importer Fixing VCID-h261-q8t7-n3cm https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.773860+00:00 Gentoo Importer Fixing VCID-2q2k-zuq7-cye9 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.742568+00:00 Gentoo Importer Fixing VCID-x7r6-efsn-sqhx https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.711137+00:00 Gentoo Importer Fixing VCID-8san-ze3j-dqdx https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.679662+00:00 Gentoo Importer Fixing VCID-g3n8-mvdt-cqdj https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.647987+00:00 Gentoo Importer Fixing VCID-2ejc-7bd5-qkbf https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.615919+00:00 Gentoo Importer Fixing VCID-pcrz-f3nj-kybr https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.583369+00:00 Gentoo Importer Fixing VCID-95vw-esba-23a2 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.549147+00:00 Gentoo Importer Fixing VCID-y7sk-dmau-4fam https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.516683+00:00 Gentoo Importer Fixing VCID-7eu3-hxbk-8fd7 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.481877+00:00 Gentoo Importer Fixing VCID-18my-61hh-n3gb https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.449770+00:00 Gentoo Importer Fixing VCID-upvn-56py-8ud7 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.416183+00:00 Gentoo Importer Fixing VCID-z8cr-rten-qqg2 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.383697+00:00 Gentoo Importer Fixing VCID-w6j3-6a6j-uqf1 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.349917+00:00 Gentoo Importer Fixing VCID-ukf2-qcjg-u7bg https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.311273+00:00 Gentoo Importer Fixing VCID-4zjw-4gjw-pqh1 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.275809+00:00 Gentoo Importer Fixing VCID-qtcm-9z3v-dydn https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.238527+00:00 Gentoo Importer Fixing VCID-tgpf-32kg-rqc2 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.204506+00:00 Gentoo Importer Fixing VCID-f1zm-g4es-vfbz https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.171187+00:00 Gentoo Importer Fixing VCID-j5k8-ztxb-uffb https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.133955+00:00 Gentoo Importer Fixing VCID-r7ss-g876-c7fg https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.102459+00:00 Gentoo Importer Fixing VCID-6szy-r2cd-9kfw https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.070610+00:00 Gentoo Importer Fixing VCID-zefw-etrb-z3fu https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.039888+00:00 Gentoo Importer Fixing VCID-73bd-e4pc-y7h6 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.007473+00:00 Gentoo Importer Fixing VCID-3fpq-jre6-53fs https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.974896+00:00 Gentoo Importer Fixing VCID-769r-8mmt-6qcc https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.940673+00:00 Gentoo Importer Fixing VCID-1zf8-qjts-9fbc https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.903047+00:00 Gentoo Importer Fixing VCID-kc7w-zjh4-vqfq https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.866900+00:00 Gentoo Importer Fixing VCID-qzb8-5u9j-27g1 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.833306+00:00 Gentoo Importer Fixing VCID-w7gj-shrq-3fcz https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.800387+00:00 Gentoo Importer Fixing VCID-8k4z-rq29-mqg5 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.769473+00:00 Gentoo Importer Fixing VCID-dh5k-q87q-4qfs https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.738241+00:00 Gentoo Importer Fixing VCID-bjny-apx2-8ba1 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.705576+00:00 Gentoo Importer Fixing VCID-5j6z-g7gt-qyea https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.674112+00:00 Gentoo Importer Fixing VCID-grjt-j4at-pqbp https://security.gentoo.org/glsa/202505-03 38.0.0