thunderbird - security update

Fixed packages 1

Vulnerabilities 8

• Unscored —
  CVE-2018-18356

  An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Dec 11, 2018
• Unscored —
  CVE-2018-18500 Public exploit EPSS 13%

  A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This resul…

  thunderbird mozjs38 mozjs52 firefox Debian Ubuntu Alpine
  Feb 5, 2019
• Unscored —
  CVE-2018-18501

  Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some o…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Feb 5, 2019
• Unscored —
  CVE-2018-18505

  An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communica…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Feb 5, 2019
• Unscored —
  CVE-2018-18509

  A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digi…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Apr 26, 2019
• Unscored —
  CVE-2018-18512

  A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the soun…

  Mozilla Thunderbird thunderbird Debian
  Apr 26, 2019
• Unscored —
  CVE-2018-18513

  A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can b…

  Mozilla Thunderbird thunderbird Debian
  Apr 26, 2019
• Unscored —
  CVE-2019-5785

  Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an…

  Google Chrome thunderbird mozjs38 Browsers Debian Ubuntu Alpine
  Jun 27, 2019