Linux · 
Ubuntu · Package update · January 25, 2021
Ubuntu · Package update · January 25, 2021thunderbird 1:78.7.1+build1-0ubuntu0.20.04.1: thunderbird 1:78.7.1+build1-0ubuntu0.20.04.1 for Ubuntu 20.04.3 LTS (focal)
thunderbird 1:78.7.1+build1-0ubuntu0.20.04.1, released January 25, 2021, fixes 49 CVEs in thunderbird. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
49
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.4233
98th percentile
Priority of the 49 CVEs
Patch now 0
Urgent 2
High 22
Routine 25
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| thunderbird | Ubuntu 20.04.3 LTS (focal) | 1:78.7.1+build1-0ubuntu0.20.04.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2020-26950 | Firefox ESR and 2 others: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting… | 8.8 | 0.4233 | None reported |
| Urgent | CVE-2020-16044 | Chromium CVE-2020-16044: Use after free in WebRTC | 8.8 | 0.0132 | None reported |
| High | CVE-2020-6463 | firefox: ELSA-2020-3241: firefox security update (IMPORTANT) | 8.8 | 0.0327 | None reported |
| High | CVE-2020-15683 | Firefox ESR and 2 others: Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox… | 9.8 | 0.0267 | None reported |
| High | CVE-2020-15659 | Firefox ESR and 2 others: Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox… | 8.8 | 0.0239 | None reported |
| High | CVE-2020-15673 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. | 8.8 | 0.0196 | None reported |
| High | CVE-2020-12422 | Firefox ESR: In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable… | 8.8 | 0.0194 | None reported |
| High | CVE-2020-26971 | Firefox ESR and 2 others: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow… | 8.8 | 0.0190 | None reported |
| High | CVE-2020-15969 | firefox: ELSA-2020-4317: firefox security update (IMPORTANT) | 8.8 | 0.0174 | None reported |
| High | CVE-2020-26973 | Firefox ESR and 2 others: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. | 8.8 | 0.0162 | None reported |
| High | CVE-2020-12426 | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 77. | 8.8 | 0.0161 | None reported |
| High | CVE-2020-35113 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. | 8.8 | 0.0157 | None reported |
| High | CVE-2020-26960 | Firefox ESR and 2 others: If the Compact() method was called on an nsTArray, the array could have been reallocated without updating… | 8.8 | 0.0156 | None reported |
| High | CVE-2020-26974 | Firefox ESR and 2 others: When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly… | 8.8 | 0.0153 | None reported |
| High | CVE-2020-15656 | Firefox ESR and 2 others: JIT optimizations involving the Javascript arguments object could confuse later optimizations. | 8.8 | 0.0152 | None reported |
| High | CVE-2020-26968 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. | 8.8 | 0.0151 | None reported |
| High | CVE-2021-23964 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. | 8.8 | 0.0136 | None reported |
| High | CVE-2020-12416 | Firefox ESR: A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink,… | 8.8 | 0.0135 | None reported |
| High | CVE-2020-26959 | Firefox ESR and 2 others: During browser shutdown, reference decrementing could have occured on a previously freed object, resulting… | 8.8 | 0.0130 | None reported |
| High | CVE-2021-23960 | Firefox ESR and 2 others: Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and… | 8.8 | 0.0129 | None reported |
| High | CVE-2020-26970 | Thunderbird: When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack… | 8.8 | 0.0125 | None reported |
| High | CVE-2021-23954 | Firefox ESR and 2 others: Using the new logical assignment operators in a JavaScript switch statement could have caused a type… | 8.8 | 0.0119 | None reported |
| High | CVE-2020-15670 | Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox for Android 79. | 8.8 | 0.0107 | None reported |
| High | CVE-2020-15685 | Thunderbird: Improper Neutralization of Special Elements used in a Command ('Command Injection') | 8.8 | 0.0088 | None reported |
| Routine | CVE-2020-6514 | chromium-browser-l10n: Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged net... | 6.5 | 0.0779 | None reported |
Showing 1 to 25 of 49
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.