Linux · 
Ubuntu · Package update · April 22, 2021
Ubuntu · Package update · April 22, 2021thunderbird 1:78.8.1+build1-0ubuntu0.18.04.1: thunderbird 1:78.8.1+build1-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)
thunderbird 1:78.8.1+build1-0ubuntu0.18.04.1, released April 22, 2021, fixes 56 CVEs in thunderbird. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
56
6 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.4233
98th percentile
Priority of the 56 CVEs
Patch now 0
Urgent 6
High 25
Routine 25
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| thunderbird | Ubuntu 18.04.6 LTS (bionic) | 1:78.8.1+build1-0ubuntu0.18.04.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2020-26950 | Firefox ESR and 2 others: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting… | 8.8 | 0.4233 | None reported |
| Urgent | CVE-2021-23978 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. | 8.8 | 0.0153 | None reported |
| Urgent | CVE-2021-23973 | Firefox ESR and 2 others: When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted,… | 6.5 | 0.0137 | None reported |
| Urgent | CVE-2020-16044 | Chromium CVE-2020-16044: Use after free in WebRTC | 8.8 | 0.0132 | None reported |
| Urgent | CVE-2021-23968 | Firefox ESR and 2 others: If Content Security Policy blocked frame navigation, the full destination of a redirect served in the… | 4.3 | 0.0131 | None reported |
| Urgent | CVE-2021-23969 | Firefox ESR and 2 others: As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents… | 4.3 | 0.0121 | None reported |
| High | CVE-2020-6463 | firefox: ELSA-2020-3241: firefox security update (IMPORTANT) | 8.8 | 0.0327 | None reported |
| High | CVE-2020-15683 | Firefox ESR and 2 others: Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox… | 9.8 | 0.0267 | None reported |
| High | CVE-2020-15659 | Firefox ESR and 2 others: Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox… | 8.8 | 0.0239 | None reported |
| High | CVE-2020-15673 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. | 8.8 | 0.0196 | None reported |
| High | CVE-2020-12422 | Firefox ESR: In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable… | 8.8 | 0.0194 | None reported |
| High | CVE-2020-26971 | Firefox ESR and 2 others: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow… | 8.8 | 0.0190 | None reported |
| High | CVE-2020-15678 | Firefox ESR and 2 others: When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting… | 8.8 | 0.0188 | None reported |
| High | CVE-2020-15969 | firefox: ELSA-2020-4317: firefox security update (IMPORTANT) | 8.8 | 0.0174 | None reported |
| High | CVE-2020-26973 | Firefox ESR and 2 others: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. | 8.8 | 0.0162 | None reported |
| High | CVE-2020-12426 | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 77. | 8.8 | 0.0161 | None reported |
| High | CVE-2020-35113 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. | 8.8 | 0.0157 | None reported |
| High | CVE-2020-26960 | Firefox ESR and 2 others: If the Compact() method was called on an nsTArray, the array could have been reallocated without updating… | 8.8 | 0.0156 | None reported |
| High | CVE-2020-26974 | Firefox ESR and 2 others: When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly… | 8.8 | 0.0153 | None reported |
| High | CVE-2020-15656 | Firefox ESR and 2 others: JIT optimizations involving the Javascript arguments object could confuse later optimizations. | 8.8 | 0.0152 | None reported |
| High | CVE-2020-26968 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. | 8.8 | 0.0151 | None reported |
| High | CVE-2021-23964 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. | 8.8 | 0.0136 | None reported |
| High | CVE-2020-12416 | Firefox ESR: A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink,… | 8.8 | 0.0135 | None reported |
| High | CVE-2020-26959 | Firefox ESR and 2 others: During browser shutdown, reference decrementing could have occured on a previously freed object, resulting… | 8.8 | 0.0130 | None reported |
| High | CVE-2021-23960 | Firefox ESR and 2 others: Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and… | 8.8 | 0.0129 | None reported |
Showing 1 to 25 of 56
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.