Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ebuild/mail-client/thunderbird@128.9.0
purl pkg:ebuild/mail-client/thunderbird@128.9.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (37)
Vulnerability Summary Aliases
VCID-18my-61hh-n3gb Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1934
VCID-1zf8-qjts-9fbc Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11704
VCID-2ejc-7bd5-qkbf Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3028
VCID-2q2k-zuq7-cye9 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3032
VCID-3fpq-jre6-53fs Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11706
VCID-4zjw-4gjw-pqh1 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0242
VCID-5j6z-g7gt-qyea Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11694
VCID-6szy-r2cd-9kfw matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal ### Summary matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the client's homeserver. ### Details The Matrix specification demands homeservers to [perform validation](https://spec.matrix.org/v1.12/client-server-api/#security-considerations-5) of the `server-name` and `media-id` components of MXC URIs with the intent to prevent path traversal. However, it is not mentioned that a similar check must also be performed on the client to prevent *client-side* path traversal. matrix-js-sdk fails to perform this validation. ### Patches Fixed in matrix-js-sdk 34.11.1. ### Workarounds None. ### References - https://spec.matrix.org/v1.12/client-server-api/#security-considerations-5 - https://blog.doyensec.com/2024/07/02/cspt2csrf.html CVE-2024-50336
GHSA-xvg8-m4x3-w6xr
VCID-73bd-e4pc-y7h6 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11708
VCID-769r-8mmt-6qcc Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11705
VCID-7eu3-hxbk-8fd7 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1935
VCID-8k4z-rq29-mqg5 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11697
VCID-8san-ze3j-dqdx Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3030
VCID-95vw-esba-23a2 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1937
VCID-b5t3-yqha-xyeq Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. CVE-2025-26696
VCID-bjny-apx2-8ba1 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11695
VCID-dh5k-q87q-4qfs Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11696
VCID-f1zm-g4es-vfbz Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0239
VCID-g3n8-mvdt-cqdj Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3029
VCID-grjt-j4at-pqbp Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11692
VCID-h261-q8t7-n3cm Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3034
VCID-j5k8-ztxb-uffb Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0238
VCID-kc7w-zjh4-vqfq Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11701
VCID-pcrz-f3nj-kybr Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1938
VCID-qtcm-9z3v-dydn Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0241
VCID-qw3q-xg7s-wbd7 Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. CVE-2025-26695
VCID-qzb8-5u9j-27g1 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11700
VCID-r7ss-g876-c7fg Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0237
VCID-tgpf-32kg-rqc2 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0240
VCID-ukf2-qcjg-u7bg Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-0243
VCID-upvn-56py-8ud7 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1933
VCID-w6j3-6a6j-uqf1 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1931
VCID-w7gj-shrq-3fcz Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-11699
VCID-x7r6-efsn-sqhx Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-3031
VCID-y7sk-dmau-4fam Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1936
VCID-z8cr-rten-qqg2 Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2025-1932
VCID-zefw-etrb-z3fu Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. CVE-2024-43097

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:14:11.871961+00:00 Gentoo Importer Fixing VCID-b5t3-yqha-xyeq https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.835743+00:00 Gentoo Importer Fixing VCID-qw3q-xg7s-wbd7 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.799171+00:00 Gentoo Importer Fixing VCID-h261-q8t7-n3cm https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.765038+00:00 Gentoo Importer Fixing VCID-2q2k-zuq7-cye9 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.734179+00:00 Gentoo Importer Fixing VCID-x7r6-efsn-sqhx https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.702783+00:00 Gentoo Importer Fixing VCID-8san-ze3j-dqdx https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.671044+00:00 Gentoo Importer Fixing VCID-g3n8-mvdt-cqdj https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.638991+00:00 Gentoo Importer Fixing VCID-2ejc-7bd5-qkbf https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.607320+00:00 Gentoo Importer Fixing VCID-pcrz-f3nj-kybr https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.574657+00:00 Gentoo Importer Fixing VCID-95vw-esba-23a2 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.540729+00:00 Gentoo Importer Fixing VCID-y7sk-dmau-4fam https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.507456+00:00 Gentoo Importer Fixing VCID-7eu3-hxbk-8fd7 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.473868+00:00 Gentoo Importer Fixing VCID-18my-61hh-n3gb https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.440510+00:00 Gentoo Importer Fixing VCID-upvn-56py-8ud7 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.407735+00:00 Gentoo Importer Fixing VCID-z8cr-rten-qqg2 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.375371+00:00 Gentoo Importer Fixing VCID-w6j3-6a6j-uqf1 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.340253+00:00 Gentoo Importer Fixing VCID-ukf2-qcjg-u7bg https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.302751+00:00 Gentoo Importer Fixing VCID-4zjw-4gjw-pqh1 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.266230+00:00 Gentoo Importer Fixing VCID-qtcm-9z3v-dydn https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.229005+00:00 Gentoo Importer Fixing VCID-tgpf-32kg-rqc2 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.195415+00:00 Gentoo Importer Fixing VCID-f1zm-g4es-vfbz https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.162207+00:00 Gentoo Importer Fixing VCID-j5k8-ztxb-uffb https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.125563+00:00 Gentoo Importer Fixing VCID-r7ss-g876-c7fg https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.093892+00:00 Gentoo Importer Fixing VCID-6szy-r2cd-9kfw https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.062390+00:00 Gentoo Importer Fixing VCID-zefw-etrb-z3fu https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:11.031194+00:00 Gentoo Importer Fixing VCID-73bd-e4pc-y7h6 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.998896+00:00 Gentoo Importer Fixing VCID-3fpq-jre6-53fs https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.966135+00:00 Gentoo Importer Fixing VCID-769r-8mmt-6qcc https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.931367+00:00 Gentoo Importer Fixing VCID-1zf8-qjts-9fbc https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.893018+00:00 Gentoo Importer Fixing VCID-kc7w-zjh4-vqfq https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.857129+00:00 Gentoo Importer Fixing VCID-qzb8-5u9j-27g1 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.824160+00:00 Gentoo Importer Fixing VCID-w7gj-shrq-3fcz https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.791850+00:00 Gentoo Importer Fixing VCID-8k4z-rq29-mqg5 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.761100+00:00 Gentoo Importer Fixing VCID-dh5k-q87q-4qfs https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.729209+00:00 Gentoo Importer Fixing VCID-bjny-apx2-8ba1 https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.696734+00:00 Gentoo Importer Fixing VCID-5j6z-g7gt-qyea https://security.gentoo.org/glsa/202505-03 38.0.0
2026-04-01T13:14:10.664143+00:00 Gentoo Importer Fixing VCID-grjt-j4at-pqbp https://security.gentoo.org/glsa/202505-03 38.0.0