Search for packages
Package details: pkg:alpm/archlinux/thunderbird@60.5.0-1
purl pkg:alpm/archlinux/thunderbird@60.5.0-1
Next non-vulnerable version 60.5.1-1
Latest non-vulnerable version 91.10-1
Risk 4.5
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-c23z-eghb-aaar
Aliases:
CVE-2018-18356
An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
60.5.1-1
Affected by 0 other vulnerabilities.
VCID-dbbg-nk7f-aaae
Aliases:
CVE-2018-18509
A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even if the shown message contents aren't covered by the signature. The flaw allows an attacker to reuse a valid S/MIME signature to craft an email message with arbitrary content. This vulnerability affects Thunderbird < 60.5.1.
60.5.1-1
Affected by 0 other vulnerabilities.
VCID-u9zd-x588-aaan
Aliases:
CVE-2018-18335
Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
60.5.1-1
Affected by 0 other vulnerabilities.
VCID-uw5g-766w-aaah
Aliases:
CVE-2019-5785
Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
60.5.1-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:28.647001+00:00 Arch Linux Importer Affected by VCID-u9zd-x588-aaan https://security.archlinux.org/AVG-908 36.0.0
2025-03-28T07:44:28.613642+00:00 Arch Linux Importer Affected by VCID-c23z-eghb-aaar https://security.archlinux.org/AVG-908 36.0.0
2025-03-28T07:44:28.592919+00:00 Arch Linux Importer Affected by VCID-dbbg-nk7f-aaae https://security.archlinux.org/AVG-908 36.0.0
2025-03-28T07:44:28.572299+00:00 Arch Linux Importer Affected by VCID-uw5g-766w-aaah https://security.archlinux.org/AVG-908 36.0.0
2024-09-18T01:59:33.450562+00:00 Arch Linux Importer Affected by VCID-u9zd-x588-aaan https://security.archlinux.org/AVG-908 34.0.1
2024-09-18T01:59:33.421014+00:00 Arch Linux Importer Affected by VCID-c23z-eghb-aaar https://security.archlinux.org/AVG-908 34.0.1
2024-09-18T01:59:33.388521+00:00 Arch Linux Importer Affected by VCID-dbbg-nk7f-aaae https://security.archlinux.org/AVG-908 34.0.1
2024-09-18T01:59:33.356935+00:00 Arch Linux Importer Affected by VCID-uw5g-766w-aaah https://security.archlinux.org/AVG-908 34.0.1
2024-01-09T19:34:36.584578+00:00 Arch Linux Importer Affected by VCID-u9zd-x588-aaan https://security.archlinux.org/AVG-908 34.0.0rc2
2024-01-09T19:34:36.562676+00:00 Arch Linux Importer Affected by VCID-c23z-eghb-aaar https://security.archlinux.org/AVG-908 34.0.0rc2
2024-01-09T19:34:36.540559+00:00 Arch Linux Importer Affected by VCID-dbbg-nk7f-aaae https://security.archlinux.org/AVG-908 34.0.0rc2
2024-01-09T19:34:36.518219+00:00 Arch Linux Importer Affected by VCID-uw5g-766w-aaah https://security.archlinux.org/AVG-908 34.0.0rc2
2024-01-03T22:25:49.686007+00:00 Arch Linux Importer Affected by VCID-u9zd-x588-aaan https://security.archlinux.org/AVG-908 34.0.0rc1
2024-01-03T22:25:49.662176+00:00 Arch Linux Importer Affected by VCID-c23z-eghb-aaar https://security.archlinux.org/AVG-908 34.0.0rc1
2024-01-03T22:25:49.635121+00:00 Arch Linux Importer Affected by VCID-dbbg-nk7f-aaae https://security.archlinux.org/AVG-908 34.0.0rc1
2024-01-03T22:25:49.608088+00:00 Arch Linux Importer Affected by VCID-uw5g-766w-aaah https://security.archlinux.org/AVG-908 34.0.0rc1