Quote:Mozilla has just released a new version of the Thunderbird email client, and the update brings critical security fixes that make it a mandatory install for everyone.
 
Mozilla Thunderbird 60.6.1 comes with the same security patches that were released as part of Firefox 66.0.1 last week.
 
As explained in the official advisory here, Mozilla resolved two different security flaws, both of which were reported by Trend Micro’s Zero Day Initiative.

First and foremost, there’s the bug documented in CVE-2019-981 and which, according to the parent company, is caused by incorrect alias information in the IonMonkey MarraySlice module.

Additionally, Thunderbird 60.6.1 addresses the vulnerability described in CVE-2019-9813 and which is caused by an Ionmonkey type confusion with __proto__ mutations.