Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters CVE-2025-3029 firefox: thunderbird: Use-after-free triggered by XSLTProcessor CVE-2025-3028 firefox: thunderbird: Memory safety bugs fixed in Firefo...

Mozilla Thunderbird Security Update (mfsa_2025-26) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

OPENSUSE-SU-2025:14853-1 MozillaThunderbird-128.8.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update ...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

OPENSUSE-SU-2025:14731-1 MozillaThunderbird-128.7.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14648-1 MozillaThunderbird-128.6.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2025:0281 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 CVE-2025-0243 firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134,...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message CVE-2024-11159 firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims CVE-2024-11694 firefox: thunderbird: Unhandled...

Mozilla Thunderbird ESR Security Update (MFSA2024-61) - Windows

Mozilla Thunderbird ESR is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox and Thunderbird Code Execution Vulnerability (CNVD-2024-34597)

Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. A code execution vulnerability exists in Mozilla Firefox and Thunderbird, which is caused by a memory corruption in NSS. An attacker could exploit this...

Information Disclosure Vulnerability in Multiple Mozilla Products (CNVD-2024-36726)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of e-mail client software that is separate from the Mozilla Application Suite. Mozilla Thunderbird is ...

Moderate: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.9.0. Security Fixes: nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: Leaking of encrypted email subjects to other...

Mozilla Thunderbird Security Bypass Vulnerability (CNVD-2024-25572)

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. Mozilla Thunderbird suffers from a security bypass vulnerability that is caused by the...

SUSE-SU-2023:0329-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Updated to version 102.7.1 bsc1207119: CVE-2022-46871: Fixed out of date libusrsctp. CVE-2023-23598: Fixed arbitrary file read from GTK drag and drop on Linux. CVE-2023-23599: Fixed issue where malicious command that could be hidden i...

SUSE-SU-2022:4579-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to version 102.6 bsc1206242: - CVE-2022-46880: Use-after-free in WebGL - CVE-2022-46872: Arbitrary file read from a compromised content process - CVE-2022-46881: Memory corruption in WebGL - CVE-2022-46874: Drag and Dropped...

Mozilla Thunderbird Security Advisory (MFSA2022-15) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

SUSE-SU-2022:2062-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 91.9.1 MFSA 2022-19 bsc1199768: - CVE-2022-1802: Prototype pollution in Top-Level Await implementation bmo1770137. - CVE-2022-1529: Untrusted input used in JavaScript object indexing, leading to prototype...

SUSE-SU-2022:1719-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Various security fixes MFSA 2022-18 bsc1198970: - CVE-2022-1520: Incorrect security status shown after viewing an attached email bmo1745019. - CVE-2022-29914: Fullscreen notification bypass using popups bmo1746448. - CVE-2022-29909:...

SUSE-SU-2022:0559-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 91.6.1 / MFSA 2022-07 bsc1196072 CVE-2022-0566 bmo1753094 Crafted email could trigger an out-of-bounds write - Mozilla Thunderbird 91.6 / MFSA 2022-06 bsc1195682 CVE-2022-22753 bmo1732435 Privilege Escalation to...