Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | thunderbird | 1:68.2.2-1~deb10u1 |
| Debian · 9 | thunderbird | 1:68.2.2-1~deb9u1 |
Vulnerabilities 9
-
Medium 6.5
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing to…
-
Unscored —
A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a va…
-
Unscored —
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequen…
-
Unscored —
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This c…
-
Unscored —
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploi…
-
Unscored —
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned i…
-
Unscored —
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call a…
-
Unscored —
Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these enti…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some o…