{"schemaVersion":3,"id":"MGASA-2018-0321","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated thunderbird packages fix security vulnerabilities\n\nThe updated packages fix several bugs and some security issues:\n\nBuffer overflow using computed size of canvas element. (CVE-2018-12359)\n\nUse-after-free when using focus(). (CVE-2018-12360)\n\nS/MIME and PGP decryption oracles can be built with HTML emails.\n(CVE-2018-12372)\n\nS/MIME plaintext can be leaked through HTML reply/forward. (CVE-2018-12373)\n\nInteger overflow in SSSE3 scaler. (CVE-2018-12362)\n\nUse-after-free when appending DOM nodes. (CVE-2018-12363)\n\nCSRF attacks through 307 redirects and NPAPI plugins. (CVE-2018-12364)\n\nCompromised IPC child process can list local filenames. (CVE-2018-12365)\n\nInvalid data handling during QCMS transformations. (CVE-2018-12366)\n\nUsing form to exfiltrate encrypted mail part by pressing enter in form field.\n(CVE-2018-12374)\n\nMemory safety bugs fixed in Firefox 60, Firefox ESR 60.1, Firefox ESR 52.9,\nand Thunderbird 52.9. (CVE-2018-5188)\n\nThe signature verification routine in Enigmail before 2.0.7 interprets user\nids as status/control messages and does not correctly keep track of the\nstatus of multiple signatures, which allows remote attackers to spoof\narbitrary email signatures via public keys containing crafted primary user\nids. (CVE-2018-12019)\n\nmainproc.c in GnuPG before 2.2.8 mishandles the original filename during\ndecryption and verification actions, which allows remote attackers to spoof\nthe output that GnuPG sends on file descriptor 2 to other programs that use\nthe \"--status-fd 2\" option. For example, the OpenPGP data might represent an\noriginal filename that contains line feed characters in conjunction with\nGOODSIG or VALIDSIG status codes. (CVE-2018-12020)","dates":{"published":"2018-07-23T22:27:34.000Z","modified":"2026-04-16T06:22:33.864Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"nspr","name":"nspr","label":"nspr","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/nspr","purlType":"rpm","versions":[{"text":"< 4.19-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.19-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"nss","name":"nss","label":"nss","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/nss","purlType":"rpm","versions":[{"text":"< 3.28.6-1.4.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.28.6-1.4.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"rootcerts","name":"rootcerts","label":"rootcerts","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/rootcerts","purlType":"rpm","versions":[{"text":"< 20180411.00-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20180411.00-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/thunderbird","purlType":"rpm","versions":[{"text":"< 52.9.1-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 52.9.1-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"thunderbird-l10n","name":"thunderbird-l10n","label":"thunderbird-l10n","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/thunderbird-l10n","purlType":"rpm","versions":[{"text":"< 52.9.1-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 52.9.1-1.mga5","eol":null,"hubHref":null}],"affectedCount":5,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2018-0321.html","label":"advisories.mageia.org/MGASA-2018-0321.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23303","label":"bugs.mageia.org/show_bug.cgi?id=23303","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23277","label":"bugs.mageia.org/show_bug.cgi?id=23277","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/52.9.0/releasenotes/","label":"www.thunderbird.net/en-US/thunderbird/52.9.0/releasenotes/","hostname":"www.thunderbird.net","tags":["WEB"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/52.9.1/releasenotes/","label":"www.thunderbird.net/en-US/thunderbird/52.9.1/releasenotes/","hostname":"www.thunderbird.net","tags":["WEB"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-18/","label":"www.mozilla.org/en-US/security/advisories/mfsa2018-18/","hostname":"www.mozilla.org","tags":["Advisory"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-05/msg00133.html","label":"lists.opensuse.org/opensuse-updates/2018-05/msg00133.html","hostname":"lists.opensuse.org","tags":["WEB"]},{"url":"https://neopg.io/blog/enigmail-signature-spoof/","label":"neopg.io/blog/enigmail-signature-spoof/","hostname":"neopg.io","tags":["WEB"]},{"url":"http://openwall.com/lists/oss-security/2018/06/13/10","label":"openwall.com/lists/oss-security/2018/06/13/10","hostname":"openwall.com","tags":["WEB"]},{"url":"https://neopg.io/blog/gpg-signature-spoof/","label":"neopg.io/blog/gpg-signature-spoof/","hostname":"neopg.io","tags":["WEB"]},{"url":"https://sourceforge.net/p/enigmail/forum/announce/thread/b948279f/","label":"sourceforge.net/p/enigmail/forum/announce/thread/b948279f/","hostname":"sourceforge.net","tags":["WEB"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-06/msg00094.html","label":"lists.opensuse.org/opensuse-updates/2018-06/msg00094.html","hostname":"lists.opensuse.org","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-12019","CVE-2018-12020","CVE-2018-12359","CVE-2018-12360","CVE-2018-12362","CVE-2018-12363","CVE-2018-12364","CVE-2018-12365","CVE-2018-12366","CVE-2018-12372","CVE-2018-12373","CVE-2018-12374","CVE-2018-5188"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-07-23T22:27:34.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T06:22:33.864Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:20:41.252Z","stale":false,"partial":false}}