[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-OPENSUSE-SU-2019:0249-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T20:55:33.689Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":42,"duplicates":43,"related":44,"reserved_at":9,"published_at":59,"modified_at":60,"state":9,"summary":61,"references_raw":63,"kevs":136,"epss":9,"epss_history":137,"metrics":138,"affected":139},"OPENSUSE-SU-2019:0249-1","Security update for MozillaThunderbird\n\nThis update for MozillaThunderbird to version 60.5.1 fixes the following issues:\n\nSecurity vulnerabilities addressed (MFSA 2019-03 MFSA 2018-31 bsc#1122983 and MFSA 2019-06 bsc#1125330):\n\n- CVE-2018-18356: Fixed a Use-after-free in Skia.\n- CVE-2019-5785: Fixed an Integer overflow in Skia.\n- CVE-2018-18335: Fixed a Buffer overflow in Skia by default deactivating Canvas 2D.\n  This issue does not affect Linuc distributions.\n- CVE-2018-18509: Fixed a flaw which during verification of certain S/MIME signatures\n  showing mistekenly that emails bring a valid sugnature. \n- CVE-2018-18500: Use-after-free parsing HTML5 stream\n- CVE-2018-18505: Privilege escalation through IPC channel messages\n- CVE-2016-5824: DoS (use-after-free) via a crafted ics file\n- CVE-2018-18501: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5\n- CVE-2018-17466: Buffer overflow and out-of-bounds read in ANGLE library with\n  TextureStorage11\n- CVE-2018-18492: Use-after-free with select element\n- CVE-2018-18493: Buffer overflow in accelerated 2D canvas with Skia\n- CVE-2018-18494: Same-origin policy violation using location attribute and\n  performance.getEntries to steal cross-origin URLs\n- CVE-2018-18498: Integer overflow when calculating buffer sizes for images\n- CVE-2018-12405: Memory safety bugs\n\nOther bug fixes and changes:\n\n* FileLink provider WeTransfer to upload large attachments\n* Thunderbird now allows the addition of OpenSearch search engines\n  from a local XML file using a minimal user inferface: [+] button\n  to select a file an add, [-] to remove.\n* More search engines: Google and DuckDuckGo available by default\n  in some locales\n* During account creation, Thunderbird will now detect servers\n  using the Microsoft Exchange protocol. It will offer the\n  installation of a 3rd party add-on (Owl) which supports that\n  protocol.\n* Thunderbird now compatible with other WebExtension-based\n  FileLink add-ons like the Dropbox add-on\n* New WebExtensions FileLink API to facilitate add-ons\n* Fix decoding problems for messages with less common charsets\n  (cp932, cp936)\n* New messages in the drafts folder (and other special or virtual\n  folders) will no longer be included in the new messages\n  notification\n* Thunderbird 60 will migrate security databases (key3.db, cert8.db\n  to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a\n  fault that potentially deleted saved passwords and private certificate\n  keys for users using a master password. Version 60.3.3 will prevent\n  the loss of data; affected users who have already upgraded to version\n  60.3.2 or earlier can restore the deleted key3.db file from backup\n  to complete the migration.\n* Address book search and auto-complete slowness introduced in\n  Thunderbird 60.3.2\n* Plain text markup with * for bold, / for italics, _ for underline\n  and | for code did not work when the enclosed text contained\n  non-ASCII characters\n* While composing a message, a link not removed when link location\n  was removed in the link properties panel\n* Encoding problems when exporting address books or messages using\n  the system charset. Messages are now always exported using the\n  UTF-8 encoding\n* If the 'Date' header of a message was invalid, Jan 1970 or Dec 1969\n  was displayed. Now using date from 'Received' header instead.\n* Body search/filtering didn't reliably ignore content of tags\n* Inappropriate warning 'Thunderbird prevented the site\n  (addons.thunderbird.net) from asking you to install software on\n  your computer' when installing add-ons\n* Incorrect display of correspondents column since own email\n  address was not always detected\n* Spurious 
 (encoded newline) inserted into drafts and sent email\n* Double-clicking on a word in the Write window sometimes\n  launched the Advanced Property Editor or Link Properties dialog\n* Fixe Cookie removal\n* 'Download rest of message' was not working if global inbox was\n  used\n* Fix Encoding problems for users (especially in Poland) when a\n  file was sent via a folder using 'Sent to > Mail recipient'\n  due to a problem in the Thunderbird MAPI interface\n* According to RFC 4616 and RFC 5721, passwords containing\n  non-ASCII characters are encoded using UTF-8 which can lead to\n  problems with non-compliant providers, for example\n  office365.com. The SMTP LOGIN and POP3 USER/PASS\n  authentication methods are now using a Latin-1 encoding again\n  to work around this issue\n* Fix shutdown crash/hang after entering an empty IMAP password\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32,34,36,38,40],{"_key":15},"CVE-2016-5824",{"_key":17},"CVE-2018-12405",{"_key":19},"CVE-2018-17466",{"_key":21},"CVE-2018-18335",{"_key":23},"CVE-2018-18356",{"_key":25},"CVE-2018-18492",{"_key":27},"CVE-2018-18493",{"_key":29},"CVE-2018-18494",{"_key":31},"CVE-2018-18498",{"_key":33},"CVE-2018-18500",{"_key":35},"CVE-2018-18501",{"_key":37},"CVE-2018-18505",{"_key":39},"CVE-2018-18509",{"_key":41},"CVE-2019-5785",[],[],[45,46,47,48,49,50,51,52,53,54,55,56,57,58],{"_key":15},{"_key":17},{"_key":19},{"_key":21},{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},"2019-02-26T09:44:25Z","2025-05-02T04:30:17.021517Z",{"cisa_kev":62,"cisa_ransomware":62,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[64,70,75,79,84,88,92,96,100,104,108,112,116,120,124,128,132],{"url":65,"sources":66,"tags":68},"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NSXP45BAXW5ILKJSQRXHTBUOBZUKLD2F/#NSXP45BAXW5ILKJSQRXHTBUOBZUKLD2F",[67],"osv_suse",[69],"Advisory",{"url":71,"sources":72,"tags":73},"https://bugzilla.suse.com/1122983",[67],[74],"REPORT",{"url":76,"sources":77,"tags":78},"https://bugzilla.suse.com/1125330",[67],[74],{"url":80,"sources":81,"tags":82},"https://www.suse.com/security/cve/CVE-2016-5824",[67],[83],"WEB",{"url":85,"sources":86,"tags":87},"https://www.suse.com/security/cve/CVE-2018-12405",[67],[83],{"url":89,"sources":90,"tags":91},"https://www.suse.com/security/cve/CVE-2018-17466",[67],[83],{"url":93,"sources":94,"tags":95},"https://www.suse.com/security/cve/CVE-2018-18335",[67],[83],{"url":97,"sources":98,"tags":99},"https://www.suse.com/security/cve/CVE-2018-18356",[67],[83],{"url":101,"sources":102,"tags":103},"https://www.suse.com/security/cve/CVE-2018-18492",[67],[83],{"url":105,"sources":106,"tags":107},"https://www.suse.com/security/cve/CVE-2018-18493",[67],[83],{"url":109,"sources":110,"tags":111},"https://www.suse.com/security/cve/CVE-2018-18494",[67],[83],{"url":113,"sources":114,"tags":115},"https://www.suse.com/security/cve/CVE-2018-18498",[67],[83],{"url":117,"sources":118,"tags":119},"https://www.suse.com/security/cve/CVE-2018-18500",[67],[83],{"url":121,"sources":122,"tags":123},"https://www.suse.com/security/cve/CVE-2018-18501",[67],[83],{"url":125,"sources":126,"tags":127},"https://www.suse.com/security/cve/CVE-2018-18505",[67],[83],{"url":129,"sources":130,"tags":131},"https://www.suse.com/security/cve/CVE-2018-18509",[67],[83],{"url":133,"sources":134,"tags":135},"https://www.suse.com/security/cve/CVE-2019-5785",[67],[83],[],[],[],[140],{"ecosystem":141,"name":142,"vendor":143,"product":144,"cpe_part":9,"purl_type":145,"purl_namespace":143,"purl_name":144,"source":9,"versions":146},"SUSE Linux Enterprise","MozillaThunderbird","suse","MozillaThunderbird&distro=SUSE Package Hub 12","rpm",[147],{"version":148,"is_range":149,"range_type":150,"version_start":9,"version_start_type":9,"version_end":151,"version_end_type":152,"fixed_in":9},"lt60_5_1_79_1",true,"ecosystem","60.5.1-79.1","excluding"]