Karthikeyan Bhargavan discovered that NSS incorrectly handled state transitions for the TLS state machine. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to skip the ServerKeyExchange message and remove the forward-secrecy property. (CVE-2015-2721)
Bob Clary, Christian Holler, Bobby Holley, and Andrew McCreight discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2015-2724)
Ronald Crane discovered multiple security vulnerabilities. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2015-2734, CVE-2015-2735, CVE-2015-2736, CVE-2015-2737, CVE-2015-2738, CVE-2015-2739, CVE-2015-2740)
Matthew Green discovered a DHE key processing issue in NSS where a MITM could force a server to downgrade TLS connections to 512-bit export-grade cryptography. An attacker could potentially exploit this to impersonate the server. (CVE-2015-4000)
{ "availability": "No subscription required", "binaries": [ { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-dbg" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-dbgsym" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-dev" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-dev-dbgsym" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-globalmenu" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-gnome-support" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-gnome-support-dbg" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-af" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ar" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ast" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-be" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-bg" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-bn" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-bn-bd" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-br" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ca" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-cs" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-da" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-de" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-el" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-en" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-en-gb" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-en-us" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-es" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-es-ar" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-es-es" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-et" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-eu" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-fi" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-fr" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-fy" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-fy-nl" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ga" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ga-ie" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-gd" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-gl" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-he" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-hr" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-hu" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-hy" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-id" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-is" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-it" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ja" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ka" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ko" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-lt" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-mk" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-nb" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-nb-no" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-nl" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-nn" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-nn-no" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pa" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pa-in" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pl" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pt" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pt-br" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pt-pt" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-rm" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ro" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ru" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-si" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sk" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sl" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sq" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sr" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sv" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sv-se" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ta" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ta-lk" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-tr" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-uk" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-vi" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-zh-cn" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-zh-hans" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-zh-hant" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-zh-tw" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-mozsymbols" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-testsuite" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-testsuite-dbgsym" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "xul-ext-calendar-timezones" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "xul-ext-gdata-provider" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "xul-ext-lightning" }, { "binary_version": "1:31.8.0+build1-0ubuntu0.14.04.1", "binary_name": "xul-ext-lightning-dbgsym" } ] }