Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2025-203-02)

The version of mozilla-thunderbird installed on the remote host is prior to 140.1.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-203-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...

Mozilla -- 'javascript:' URLs execution

[email protected] reports: Thunderbird executed javascript: URLs when used in object and embed tags...

Mozilla -- Ignored paths while checking navigations

[email protected] reports: Thunderbird ignored paths when checking the validity of navigations in a frame...

openSUSE Security Advisory (SUSE-SU-2025:02368-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2025:02368-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02368-1 advisory. Update to Mozilla Thunderbird 128.12 MFSA 2025-55, bsc1244670: - CVE-2025-6424: Use-after-free ...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.12 MFSA 2025-55, bsc1244670: CVE-2025-6424: Use-after-free in FontFaceSet bmo1966423 CVE-2025-6425: The WebCompat WebExtension shipped exposed a persistent UUID bmo1717672 CVE-2025-6426: No warning wh...

[SECURITY] Fedora 42 Update: thunderbird-128.12.0-1.fc42

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 41 Update: thunderbird-128.12.0-1.fc41

Mozilla Thunderbird is a standalone mail and newsgroup client...

ROS-20250710-03

Vulnerability in Update Handler component of Mozilla Firefox, Mozilla Firefox ESR and Mozilla Thunderbird browsers is related to access control flaws. Mozilla Thunderbird is related to access control flaws. Exploitation of the vulnerability could allow An attacker acting remotely could elevate hi...

MozillaThunderbird-128.12.0-1.1 on GA media (moderate)

MozillaThunderbird-128.12.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15312-1 Rating: moderate Cross-References: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6429 CVE-2025-6430 CVSS scores: CVE-2025-6424 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-6424 SUSE : 8....

OPENSUSE-SU-2025:15312-1 MozillaThunderbird-128.12.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.12.0-1.1 package on the GA media of openSUSE Tumbleweed...

MozillaThunderbird-128.11.1-2.1 on GA media (moderate)

MozillaThunderbird-128.11.1-2.1 on GA media Announcement ID: openSUSE-SU-2025:15204-1 Rating: moderate Cross-References: CVE-2025-5986 CVSS scores: CVE-2025-5986 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

Information Disclosure Vulnerability in Multiple Mozilla Products (CNVD-2025-15491)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An information disclosure vulnerability exists in several Mozilla...

Memory Error Vulnerability in Multiple Mozilla Products

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A memory error vulnerability exists in several Mozilla products, which c...

Mozilla Thunderbird ESR Security Update (mfsa_2025-55) - Mac OS X

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Thunderbird Security Update (mfsa_2025-54) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Thunderbird ESR Security Update (mfsa_2025-55) - Windows

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Thunderbird Security Update (mfsa_2025-54) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

firefox: thunderbird: Use-after-free in FontFaceSet

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A use-after-free in FontFaceSet resulted in a potentially exploitable crash...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements, and mov...