Vulnerabilities

Plaintext of decrypted emails can leak through by user submitting an embedded form.

Using remote content in encrypted messages can lead to the disclosure of plaintext.

Mozilla developers backported selected changes in the Skia library.

A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data.

It is possible to spoof the filename of an attachment and display an arbitrary attachment name.

Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element.

Plaintext of decrypted emails can leak through the src attribute of remote images, or links.

Crafted message headers can cause a Thunderbird process to hang on receiving the message.

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes.

A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths.

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths.

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.