Unscored DSA-4702-1 5 CVEs

thunderbird - security update

Published Jun 11, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 10	thunderbird	1:68.9.0-1~deb10u1
Debian · 9	thunderbird	1:68.9.0-1~deb9u1

Vulnerabilities 5

Unscored —

CVE-2020-12398

If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderb…

Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12399

NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak privat…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12405

When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially explo…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12406

Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12410

Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed ev…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020