[SECURITY] Fedora 26 Update: thunderbird-52.2.0-1.fc26

Mozilla Thunderbird is a standalone mail and newsgroup client...

RHEL 6 / 7 : thunderbird (RHSA-2017:1561)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:1561 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.2.0. Security Fixes:...

[SECURITY] Fedora 26 Update: thunderbird-52.1.0-1.fc26

Mozilla Thunderbird is a standalone mail and newsgroup client...

OpenJDK: newline injection in the SMTP client (Networking, 8171533)

A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...

[SECURITY] Fedora 25 Update: thunderbird-52.1.0-1.fc25

Mozilla Thunderbird is a standalone mail and newsgroup client...

OpenJDK: newline injection in the SMTP client (Networking, 8171533)

A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...

OpenJDK: newline injection in the SMTP client (Networking, 8171533)

A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...

UBUNTU-CVE-2017-5899

Directory traversal vulnerability in the setuid root helper binary in S-nail later S-mailx before 14.8.16 allows local users to write to arbitrary files and consequently gain root privileges via a .. dot dot in the randstr argument...

[SECURITY] Fedora 24 Update: thunderbird-45.8.0-1.fc24

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 25 Update: thunderbird-45.8.0-1.fc25

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 24 Update: thunderbird-45.7.0-1.fc24

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 25 Update: thunderbird-45.7.0-1.fc25

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] [DLA 782-1] icedove security update

Package : icedove Version : 45.6.0-2 CVE ID : CVE-2016-9893 CVE-2016-9895 CVE-2016-9897 CVE-2016-9898 CVE-2016-9899 CVE-2016-9900 CVE-2016-9904 CVE-2016-9905 Multiple security issues have been found in Icedove, Debians version of the Mozilla Thunderbird mail client: Multiple vulnerabilities may...

[SECURITY] Fedora 24 Update: thunderbird-45.6.0-2.fc24

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 25 Update: thunderbird-45.6.0-2.fc25

Mozilla Thunderbird is a standalone mail and newsgroup client...

Mutt: Heap-based buffer overflow

Background Mutt is a small but very powerful text-based mail client. Description A heap-based buffer overflow was discovered in Mutt’s muttsubstrdup function. Impact A remote attacker could cause a Denial of Service condition. Workaround There is no known workaround at this time. Resolution All...

CVE-2016-9920

steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute...

[SECURITY] Fedora 25 Update: thunderbird-45.5.1-1.fc25

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 24 Update: thunderbird-45.5.1-1.fc24

Mozilla Thunderbird is a standalone mail and newsgroup client...

Mozilla Thunderbird < 45.5.1 nsSMILTimeContainer.cpp SVG Animation RCE (macOS)

The version of Mozilla Thunderbird installed on the remote macOS or Mac OS X host is prior to 45.5.1. It is, therefore, affected by a use-after-free error in dom/smil/nsSMILTimeContainer.cpp when handling SVG animations. An unauthenticated, remote attacker can exploit this issue, via a specially...