Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ebuild/mail-client/thunderbird-bin@78.5.1
purl pkg:ebuild/mail-client/thunderbird-bin@78.5.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (12)
Vulnerability Summary Aliases
VCID-1frd-d76n-13fm Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-26965
VCID-436x-mrs7-q3gk Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-26960
VCID-83xt-ng2x-zugv Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-26953
VCID-8jzn-g96u-tudw Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-26956
VCID-8tmx-53k3-pbfj Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-26961
VCID-czjm-z1pe-jqby Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code. CVE-2020-26970
VCID-dhed-rfz6-ffe9 Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-26951
VCID-dsaw-xa6k-4yfw Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-26968
VCID-f3ws-d8fh-9ucz Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-26959
VCID-nx21-ks3v-53e4 Heap buffer overflow in CefSharp ### Impact A memory corruption bug(Heap overflow) in the FreeType font rendering library. > This can be exploited by attackers to execute arbitrary code by using specially crafted fonts with embedded PNG images . As per https://www.secpod.com/blog/chrome-zero-day-under-active-exploitation-patch-now/ Google is aware of reports that an exploit for CVE-2020-15999 exists in the wild. ### Patches Upgrade to 85.3.130 or higher ### References - https://www.secpod.com/blog/chrome-zero-day-under-active-exploitation-patch-now/ - https://www.zdnet.com/article/google-releases-chrome-security-update-to-patch-actively-exploited-zero-day/ - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999 - https://magpcss.org/ceforum/viewtopic.php?f=10&t=17942 To review the `CEF/Chromium` patch see https://bitbucket.org/chromiumembedded/cef/commits/cd6cbe008b127990036945fb75e7c2c1594ab10d CVE-2020-15999
GHSA-pv36-h7jh-qm62
VCID-sb4d-y4bp-k3h9 Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-26958
VCID-yg7c-ar4c-w3fn Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. CVE-2020-16012

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:14:26.718086+00:00 Gentoo Importer Fixing VCID-czjm-z1pe-jqby https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.685628+00:00 Gentoo Importer Fixing VCID-dsaw-xa6k-4yfw https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.655653+00:00 Gentoo Importer Fixing VCID-1frd-d76n-13fm https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.621095+00:00 Gentoo Importer Fixing VCID-8tmx-53k3-pbfj https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.591363+00:00 Gentoo Importer Fixing VCID-436x-mrs7-q3gk https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.560700+00:00 Gentoo Importer Fixing VCID-f3ws-d8fh-9ucz https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.531150+00:00 Gentoo Importer Fixing VCID-sb4d-y4bp-k3h9 https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.500898+00:00 Gentoo Importer Fixing VCID-8jzn-g96u-tudw https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.471006+00:00 Gentoo Importer Fixing VCID-83xt-ng2x-zugv https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.439932+00:00 Gentoo Importer Fixing VCID-dhed-rfz6-ffe9 https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.409578+00:00 Gentoo Importer Fixing VCID-yg7c-ar4c-w3fn https://security.gentoo.org/glsa/202012-04 38.0.0
2026-04-01T13:14:26.379719+00:00 Gentoo Importer Fixing VCID-nx21-ks3v-53e4 https://security.gentoo.org/glsa/202012-04 38.0.0