SUSE-SU-2025:1506-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird ESR 128.10 update bsc1241621: - CVE-2025-4082: WebGL shader attribute memory corruption in Thunderbird for macOS. - CVE-2025-4087: Unsafe attribute access during XPath parsing. - CVE-2025-4093: Memory safety bug...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

ALSA-2025:4649 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-2830 thunderbird: Leak of hashed Window credentials via crafted...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-2830 thunderbird: Leak of hashed Window credentials via crafted...

Vulnerabilities fixed in Mozilla Firefox and Thunderbird

Mozilla has fixed vulnerabilities in Firefox and Thunderbird Specifically for versions under 138 and 128.10. The vulnerabilities include privilege escalation through code injection, insecure processing of WebGL shader attributes, improper isolation of processes, and local code execution through...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

firefox: thunderbird: Unsafe attribute access during XPath parsing

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A vulnerability was identified in Firefox where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access an...

openSUSE Security Advisory (SUSE-SU-2025:1436-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-4087 firefox: thunderbird: Process isolation bypass using...

SUSE: Security Advisory (SUSE-SU-2025:1436-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client allows a hacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, provided that the user opens a specially crafted PDF document or a web page...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2025:1436-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1436-1 advisory. - Firefox Extended Support Release 128.10.0 ESR MFSA 2025-29 bsc1241621: CVE-2025-2817: Potentia...

MozillaFirefox-138.0-1.1 on GA media (moderate)

MozillaFirefox-138.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15045-1 Rating: moderate Cross-References: CVE-2025-2817 CVE-2025-4082 CVE-2025-4083 CVE-2025-4085 CVE-2025-4086 CVE-2025-4087 CVE-2025-4088 CVE-2025-4089 CVE-2025-4090 CVE-2025-4091 CVE-2025-4092 CVSS scores: CVE-2025-2817 SU...

SUSE-SU-2025:1436-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 128.10.0 ESR MFSA 2025-29 bsc1241621: CVE-2025-2817: Potential privilege escalation in Firefox Updater CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS CVE-2025-4083: Process...

[SECURITY] Fedora 41 Update: firefox-138.0-1.fc41

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

OPENSUSE-SU-2025:15045-1 MozillaFirefox-138.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-138.0-1.1 package on the GA media of openSUSE Tumbleweed...

MozillaThunderbird-128.10.0-1.1 on GA media (moderate)

MozillaThunderbird-128.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15042-1 Rating: moderate Cross-References: CVE-2025-2817 CVE-2025-4082 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093 CVSS scores: CVE-2025-2817 SUSE : 7.8...

[SECURITY] Fedora 42 Update: thunderbird-128.9.2-1.fc42

Mozilla Thunderbird is a standalone mail and newsgroup client...

OPENSUSE-SU-2025:15042-1 MozillaThunderbird-128.10.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Thunderbird < 128.10

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 128.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-32 advisory. - Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memo...