Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-5185

Fixed in a distro release EPSS 2%

Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.

Published 2018-06-11 · CVE record · OSV

Products: mozilla thunderbird_esr, mozilla thunderbird

Distro releases

ReleasePackageFixed in
Amazon Linux 2thunderbird52.8.0-1.amzn2
Arch Linuxthunderbird52.8.0-1
Debian 12thunderbird1:52.8.0-1
Debian 13thunderbird1:52.8.0-1
Debian 14thunderbird1:52.8.0-1
Debian 7thunderbird1:52.8.0-1~deb7u1
Debian 8thunderbird1:52.8.0-1~deb8u1
Debian 9thunderbird1:52.8.0-1~deb9u1
Red Hat Enterprise Linux 6thunderbird0:52.8.0-2.el6_9
Red Hat Enterprise Linux 6thunderbird-debuginfo0:52.8.0-2.el6_9
Red Hat Enterprise Linux 7thunderbird0:52.8.0-1.el7_5
Red Hat Enterprise Linux 7thunderbird-debuginfo0:52.8.0-1.el7_5
Ubuntu 14.04 LTSthunderbird1:52.8.0+build1-0ubuntu0.14.04.1
Ubuntu 16.04 LTSthunderbird1:52.8.0+build1-0ubuntu0.16.04.1
Ubuntu 18.04 LTSthunderbird1:52.8.0+build1-0ubuntu0.18.04.1
openSUSE TumbleweedMozillaThunderbird91.1.1-1.1