Search for packages
Package details: pkg:alpm/archlinux/thunderbird@91.4.0-1
purl pkg:alpm/archlinux/thunderbird@91.4.0-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (10)
Vulnerability Summary Aliases
VCID-4zuz-4gqa-aaaa When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43541
VCID-592r-h29e-aaaa By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43538
VCID-8kaa-wtcn-aaam Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43542
VCID-b9cv-67uj-aaac Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43545
VCID-bu1f-fjdb-aaas Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43536
VCID-dgp7-325g-aaap It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43546
VCID-gmmp-91fh-aaaq Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird < 91.4.0. CVE-2021-43528
VCID-j9ej-swa8-aaab Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43543
VCID-txw1-79x3-aaap An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43537
VCID-zvxu-3qbb-aaad Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. CVE-2021-43539

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:45:19.504254+00:00 Arch Linux Importer Fixing VCID-gmmp-91fh-aaaq https://security.archlinux.org/AVG-2608 36.0.0
2025-03-28T07:45:19.472076+00:00 Arch Linux Importer Fixing VCID-bu1f-fjdb-aaas https://security.archlinux.org/AVG-2608 36.0.0
2025-03-28T07:45:19.438609+00:00 Arch Linux Importer Fixing VCID-txw1-79x3-aaap https://security.archlinux.org/AVG-2608 36.0.0
2025-03-28T07:45:19.405142+00:00 Arch Linux Importer Fixing VCID-592r-h29e-aaaa https://security.archlinux.org/AVG-2608 36.0.0
2025-03-28T07:45:19.372187+00:00 Arch Linux Importer Fixing VCID-zvxu-3qbb-aaad https://security.archlinux.org/AVG-2608 36.0.0
2025-03-28T07:45:19.336620+00:00 Arch Linux Importer Fixing VCID-4zuz-4gqa-aaaa https://security.archlinux.org/AVG-2608 36.0.0
2025-03-28T07:45:19.303854+00:00 Arch Linux Importer Fixing VCID-8kaa-wtcn-aaam https://security.archlinux.org/AVG-2608 36.0.0
2025-03-28T07:45:19.282150+00:00 Arch Linux Importer Fixing VCID-j9ej-swa8-aaab https://security.archlinux.org/AVG-2608 36.0.0
2025-03-28T07:45:19.260149+00:00 Arch Linux Importer Fixing VCID-b9cv-67uj-aaac https://security.archlinux.org/AVG-2608 36.0.0
2025-03-28T07:45:19.238126+00:00 Arch Linux Importer Fixing VCID-dgp7-325g-aaap https://security.archlinux.org/AVG-2608 36.0.0
2024-09-18T02:00:15.578330+00:00 Arch Linux Importer Fixing VCID-gmmp-91fh-aaaq https://security.archlinux.org/AVG-2608 34.0.1
2024-09-18T02:00:15.550225+00:00 Arch Linux Importer Fixing VCID-bu1f-fjdb-aaas https://security.archlinux.org/AVG-2608 34.0.1
2024-09-18T02:00:15.524563+00:00 Arch Linux Importer Fixing VCID-txw1-79x3-aaap https://security.archlinux.org/AVG-2608 34.0.1
2024-09-18T02:00:15.499209+00:00 Arch Linux Importer Fixing VCID-592r-h29e-aaaa https://security.archlinux.org/AVG-2608 34.0.1
2024-09-18T02:00:15.469713+00:00 Arch Linux Importer Fixing VCID-zvxu-3qbb-aaad https://security.archlinux.org/AVG-2608 34.0.1
2024-09-18T02:00:15.433660+00:00 Arch Linux Importer Fixing VCID-4zuz-4gqa-aaaa https://security.archlinux.org/AVG-2608 34.0.1
2024-09-18T02:00:15.394275+00:00 Arch Linux Importer Fixing VCID-8kaa-wtcn-aaam https://security.archlinux.org/AVG-2608 34.0.1
2024-09-18T02:00:15.364526+00:00 Arch Linux Importer Fixing VCID-j9ej-swa8-aaab https://security.archlinux.org/AVG-2608 34.0.1
2024-09-18T02:00:15.338951+00:00 Arch Linux Importer Fixing VCID-b9cv-67uj-aaac https://security.archlinux.org/AVG-2608 34.0.1
2024-09-18T02:00:15.313784+00:00 Arch Linux Importer Fixing VCID-dgp7-325g-aaap https://security.archlinux.org/AVG-2608 34.0.1
2024-01-09T19:34:39.125607+00:00 Arch Linux Importer Fixing VCID-gmmp-91fh-aaaq https://security.archlinux.org/AVG-2608 34.0.0rc2
2024-01-09T19:34:39.103696+00:00 Arch Linux Importer Fixing VCID-bu1f-fjdb-aaas https://security.archlinux.org/AVG-2608 34.0.0rc2
2024-01-09T19:34:39.081581+00:00 Arch Linux Importer Fixing VCID-txw1-79x3-aaap https://security.archlinux.org/AVG-2608 34.0.0rc2
2024-01-09T19:34:39.059399+00:00 Arch Linux Importer Fixing VCID-592r-h29e-aaaa https://security.archlinux.org/AVG-2608 34.0.0rc2
2024-01-09T19:34:39.037519+00:00 Arch Linux Importer Fixing VCID-zvxu-3qbb-aaad https://security.archlinux.org/AVG-2608 34.0.0rc2
2024-01-09T19:34:39.015321+00:00 Arch Linux Importer Fixing VCID-4zuz-4gqa-aaaa https://security.archlinux.org/AVG-2608 34.0.0rc2
2024-01-09T19:34:38.993432+00:00 Arch Linux Importer Fixing VCID-8kaa-wtcn-aaam https://security.archlinux.org/AVG-2608 34.0.0rc2
2024-01-09T19:34:38.971423+00:00 Arch Linux Importer Fixing VCID-j9ej-swa8-aaab https://security.archlinux.org/AVG-2608 34.0.0rc2
2024-01-09T19:34:38.949540+00:00 Arch Linux Importer Fixing VCID-b9cv-67uj-aaac https://security.archlinux.org/AVG-2608 34.0.0rc2
2024-01-09T19:34:38.926878+00:00 Arch Linux Importer Fixing VCID-dgp7-325g-aaap https://security.archlinux.org/AVG-2608 34.0.0rc2
2024-01-03T22:26:30.058936+00:00 Arch Linux Importer Fixing VCID-gmmp-91fh-aaaq https://security.archlinux.org/AVG-2608 34.0.0rc1
2024-01-03T22:26:30.032118+00:00 Arch Linux Importer Fixing VCID-bu1f-fjdb-aaas https://security.archlinux.org/AVG-2608 34.0.0rc1
2024-01-03T22:26:30.005726+00:00 Arch Linux Importer Fixing VCID-txw1-79x3-aaap https://security.archlinux.org/AVG-2608 34.0.0rc1
2024-01-03T22:26:29.979684+00:00 Arch Linux Importer Fixing VCID-592r-h29e-aaaa https://security.archlinux.org/AVG-2608 34.0.0rc1
2024-01-03T22:26:29.953330+00:00 Arch Linux Importer Fixing VCID-zvxu-3qbb-aaad https://security.archlinux.org/AVG-2608 34.0.0rc1
2024-01-03T22:26:29.929307+00:00 Arch Linux Importer Fixing VCID-4zuz-4gqa-aaaa https://security.archlinux.org/AVG-2608 34.0.0rc1
2024-01-03T22:26:29.902651+00:00 Arch Linux Importer Fixing VCID-8kaa-wtcn-aaam https://security.archlinux.org/AVG-2608 34.0.0rc1
2024-01-03T22:26:29.875504+00:00 Arch Linux Importer Fixing VCID-j9ej-swa8-aaab https://security.archlinux.org/AVG-2608 34.0.0rc1
2024-01-03T22:26:29.850979+00:00 Arch Linux Importer Fixing VCID-b9cv-67uj-aaac https://security.archlinux.org/AVG-2608 34.0.0rc1
2024-01-03T22:26:29.820806+00:00 Arch Linux Importer Fixing VCID-dgp7-325g-aaap https://security.archlinux.org/AVG-2608 34.0.0rc1