tocsin

Debian/thunderbird: medium 4.3

By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. This vulnerability affects Thunderbird < 68.8.0.

Action: Upgrade thunderbird to 1:68.8.0-1 or later.

Affected

introducedfixedlast affected
01:68.8.0-1-

Fixed versions

1:68.8.0-1

Sources

published · modified · JSON