Search for packages
Package details: pkg:alpm/archlinux/thunderbird@60.5.1-1
purl pkg:alpm/archlinux/thunderbird@60.5.1-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-c23z-eghb-aaar An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2018-18356
VCID-dbbg-nk7f-aaae A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even if the shown message contents aren't covered by the signature. The flaw allows an attacker to reuse a valid S/MIME signature to craft an email message with arbitrary content. This vulnerability affects Thunderbird < 60.5.1. CVE-2018-18509
VCID-u9zd-x588-aaan Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2018-18335
VCID-uw5g-766w-aaah Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. CVE-2019-5785

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:28.652132+00:00 Arch Linux Importer Fixing VCID-u9zd-x588-aaan https://security.archlinux.org/AVG-908 36.0.0
2025-03-28T07:44:28.618589+00:00 Arch Linux Importer Fixing VCID-c23z-eghb-aaar https://security.archlinux.org/AVG-908 36.0.0
2025-03-28T07:44:28.597805+00:00 Arch Linux Importer Fixing VCID-dbbg-nk7f-aaae https://security.archlinux.org/AVG-908 36.0.0
2025-03-28T07:44:28.577191+00:00 Arch Linux Importer Fixing VCID-uw5g-766w-aaah https://security.archlinux.org/AVG-908 36.0.0
2024-09-18T01:59:33.455331+00:00 Arch Linux Importer Fixing VCID-u9zd-x588-aaan https://security.archlinux.org/AVG-908 34.0.1
2024-09-18T01:59:33.425848+00:00 Arch Linux Importer Fixing VCID-c23z-eghb-aaar https://security.archlinux.org/AVG-908 34.0.1
2024-09-18T01:59:33.393349+00:00 Arch Linux Importer Fixing VCID-dbbg-nk7f-aaae https://security.archlinux.org/AVG-908 34.0.1
2024-09-18T01:59:33.361791+00:00 Arch Linux Importer Fixing VCID-uw5g-766w-aaah https://security.archlinux.org/AVG-908 34.0.1
2024-01-09T19:34:36.589275+00:00 Arch Linux Importer Fixing VCID-u9zd-x588-aaan https://security.archlinux.org/AVG-908 34.0.0rc2
2024-01-09T19:34:36.567293+00:00 Arch Linux Importer Fixing VCID-c23z-eghb-aaar https://security.archlinux.org/AVG-908 34.0.0rc2
2024-01-09T19:34:36.545257+00:00 Arch Linux Importer Fixing VCID-dbbg-nk7f-aaae https://security.archlinux.org/AVG-908 34.0.0rc2
2024-01-09T19:34:36.522932+00:00 Arch Linux Importer Fixing VCID-uw5g-766w-aaah https://security.archlinux.org/AVG-908 34.0.0rc2
2024-01-03T22:25:49.690729+00:00 Arch Linux Importer Fixing VCID-u9zd-x588-aaan https://security.archlinux.org/AVG-908 34.0.0rc1
2024-01-03T22:25:49.666938+00:00 Arch Linux Importer Fixing VCID-c23z-eghb-aaar https://security.archlinux.org/AVG-908 34.0.0rc1
2024-01-03T22:25:49.640101+00:00 Arch Linux Importer Fixing VCID-dbbg-nk7f-aaae https://security.archlinux.org/AVG-908 34.0.0rc1
2024-01-03T22:25:49.612755+00:00 Arch Linux Importer Fixing VCID-uw5g-766w-aaah https://security.archlinux.org/AVG-908 34.0.0rc1