ALSA-2025:12188 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefox: thunderbird: Incorrect URL stripping in CSP reports CVE-2025-80...

FreeBSD : Mozilla -- Memory safety bugs (62f1a68f-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 62f1a68f-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0,...

FreeBSD : Mozilla -- Multiple vulnerabilities (67c6461f-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 67c6461f-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Memory safety bugs present in Firefox 140 and Thunderbird 140...

[SECURITY] [DSA 5966-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5966-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 27, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4253-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4253-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 27, 2025 https://wiki.debian.org/LTS -...

DLA-4253-1 thunderbird - security update

Bulletin has no description...

CVE-2025-8033

The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1...

CVE-2025-8032

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1...

CVE-2025-8043 Incorrect URL truncation

Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability was fixed in Firefox 141...

CVE-2025-8033

The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1...

CVE-2025-8036 DNS rebinding circumvents CORS

Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1...

Mozilla -- CORS circumvention

[email protected] reports: Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding...

Mozilla -- 'javascript:' URLs execution

[email protected] reports: Thunderbird executed javascript: URLs when used in object and embed tags...

DLA-4239-1 thunderbird - security update

Bulletin has no description...

TencentOS Server 3: thunderbird (TSSA-2025:0496)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0496 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

FreeBSD : Mozilla -- persistent UUID that identifies browser (9320590b-58cf-11f0-b4ad-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9320590b-58cf-11f0-b4ad-b42e991fc52e advisory. [email protected] reports: An attacker who enumerated resources from the WebCompat extension could...

[SECURITY] [DSA 5959-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5959-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 06, 2025 https://www.debian.org/security/faq -...

Fedora 42 : thunderbird (2025-32d6feec91)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-32d6feec91 advisory. Update to 128.10.2 https://www.thunderbird.net/en-US/thunderbird/128.10.2esr/releasenotes/ Tenable has extracted the preceding description block...

RHSA-2025:10161 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...