Karthikeyan Bhargavan and Gaetan Leurent discovered that NSS incorrectly allowed MD5 to be used for TLS 1.2 connections. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to view sensitive information. (CVE-2015-7575)
Yves Younan discovered that graphite2 incorrectly handled certain malformed fonts. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitary code with the privileges of the user invoking Thunderbird. (CVE-2016-1523)
Bob Clary, Christian Holler, Nils Ohlmeier, Gary Kwong, Jesse Ruderman, Carsten Book, and Randell Jesup discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2016-1930)
Aki Helin discovered a buffer overflow when rendering WebGL content in some circumstances. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2016-1935)
{ "availability": "No subscription required", "binaries": [ { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-dbg" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-dbgsym" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-dev" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-dev-dbgsym" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-globalmenu" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-gnome-support" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-gnome-support-dbg" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-af" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ar" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ast" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-be" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-bg" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-bn" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-bn-bd" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-br" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ca" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-cs" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-cy" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-da" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-de" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-dsb" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-el" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-en" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-en-gb" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-en-us" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-es" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-es-ar" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-es-es" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-et" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-eu" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-fi" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-fr" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-fy" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-fy-nl" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ga" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ga-ie" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-gd" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-gl" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-he" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-hr" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-hsb" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-hu" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-hy" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-id" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-is" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-it" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ja" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ka" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ko" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-lt" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-mk" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-nb" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-nb-no" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-nl" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-nn" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-nn-no" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pa" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pa-in" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pl" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pt" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pt-br" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-pt-pt" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-rm" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ro" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ru" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-si" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sk" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sl" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sq" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sr" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sv" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-sv-se" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ta" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-ta-lk" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-tr" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-uk" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-vi" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-zh-cn" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-zh-hans" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-zh-hant" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-locale-zh-tw" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-mozsymbols" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "thunderbird-testsuite" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "xul-ext-calendar-timezones" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "xul-ext-gdata-provider" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "xul-ext-lightning" }, { "binary_version": "1:38.6.0+build1-0ubuntu0.14.04.1", "binary_name": "xul-ext-lightning-dbgsym" } ] }