[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-128.6.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

Slackware: Security Advisory (SSA:2025-008-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 9 : thunderbird (RHSA-2025:0166)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:0166 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 134...

Mozilla Thunderbird ESR < 128.6

The version of Thunderbird ESR installed on the remote macOS or Mac OS X host is prior to 128.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-05 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5,...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 CVE-2025-0243 firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134,...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2025-008-02)

The version of mozilla-thunderbird installed on the remote host is prior to 128.6.0esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-008-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

RHEL 9 : thunderbird (RHSA-2025:0147)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:0147 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 134...

Mozilla Thunderbird < 134.0

The version of Thunderbird installed on the remote Windows host is prior to 134.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-04 advisory. - Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory...

KLA78849 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, gain privileges, spoof user interface, perform cross-site scripting attack. Below is a complete list of...

PT-2025-3804

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 134 Firefox ESR versions prior to 128.6 Thunderbird versions prior to 134 Thunderbird versions prior to 128.6 Description The WebChannel API, used for transporting information across processes, did not properly check...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2024:4326-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4326-1 advisory. - CVE-2024-50336: Fixed insufficient MXC URI validation which could allow client-side path traversal...

openSUSE Security Advisory (SUSE-SU-2024:4326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MozillaThunderbird-128.5.2-1.1 on GA media (moderate)

MozillaThunderbird-128.5.2-1.1 on GA media Announcement ID: openSUSE-SU-2024:14584-1 Rating: moderate Cross-References: CVE-2024-50336 CVSS scores: CVE-2024-50336 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: CVE-2024-50336: Fixed insufficient MXC URI validation which could allow client-side path traversal bsc1234413 Other fixes: - Updated to Mozilla Thunderbird 128.5.2i bsc1234413: fixed: Large virtual folders could be very slow fixed:...

SUSE-SU-2024:4326-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - CVE-2024-50336: Fixed insufficient MXC URI validation which could allow client-side path traversal bsc1234413 Other fixes: - Updated to Mozilla Thunderbird 128.5.2i bsc1234413: fixed: Large virtual folders could be very slow fixed:...

[SECURITY] Fedora 40 Update: thunderbird-128.5.2-1.fc40

Mozilla Thunderbird is a standalone mail and newsgroup client...

OPENSUSE-SU-2024:14584-1 MozillaThunderbird-128.5.2-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 41 Update: thunderbird-128.5.2-1.fc41

Mozilla Thunderbird is a standalone mail and newsgroup client...

Mozilla Thunderbird ESR Security Update (MFSA2024-69) - Windows

Mozilla Thunderbird ESR is prone to an insufficient validation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...