crítica

SUSE-SU-2025:4006-1

Security update for MozillaThunderbird

En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.

Severidad por fuente

Ninguna fuente da una puntuación CVSS.

La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.

Descripción

This update for MozillaThunderbird fixes the following issue: Mozilla Thunderbird is updated to 140.4. * changed: Account Hub is now disabled by default for second email account (bmo#1992027) * changed: Flatpak runtime has been updated to Freedesktop SDK 24.08 (bmo#1952100) * fixed: Users could not read mail signed with OpenPGP v6 and PQC keys (bmo#1986845) * fixed: Image preview in Insert Image dialog failed with CSP error for web resources (bmo#1989392) * fixed: Emptying trash on exit did not work with some providers (bmo#1975147) * fixed: Thunderbird could crash when applying filters (bmo#1987880) * fixed: Users were unable to override expired mail server certificate (bmo#1979323) * fixed: Opening Website header link in RSS feed incorrectly re-encoded URL parameters (bmo#1971035) Security fixes: MFSA 2025-85 (bsc#1251263): * CVE-2025-11708 (bmo#1988931) Use-after-free in MediaTrackGraphImpl::GetInstance() * CVE-2025-11709 (bmo#1989127) Out of bounds read/write in a privileged process triggered by WebGL textures * CVE-2025-11710 (bmo#1989899) Cross-process information leaked due to malicious IPC messages * CVE-2025-11711 (bmo#1989978) Some non-writable Object properties could be modified * CVE-2025-11712 (bmo#1979536) An OBJECT tag type attribute overrode browser behavior on web resources without a content-type * CVE-2025-11713 (bmo#1986142) Potential user-assisted code execution in “Copy as cURL” command * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970, bmo#1991040, bmo#1992113) Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244, bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899) Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144

Paquetes afectados y versiones corregidas

Fuente	Paquete	Corregido en
openSUSE Leap 15.6	MozillaThunderbird, MozillaThunderbird-translations-common, MozillaThunderbird-translations-other	140.4.0-150200.8.242.1
SUSE Linux Enterprise 15.6	MozillaThunderbird, MozillaThunderbird-translations-common, MozillaThunderbird-translations-other	140.4.0-150200.8.242.1
SUSE Linux Enterprise 15.7	MozillaThunderbird, MozillaThunderbird-translations-common, MozillaThunderbird-translations-other	140.4.0-150200.8.242.1

Mostrar las 9 entradas de 3 fuentes

Fuente	Paquete	Corregido en
openSUSE Leap 15.6	MozillaThunderbird	140.4.0-150200.8.242.1
openSUSE Leap 15.6	MozillaThunderbird-translations-common	140.4.0-150200.8.242.1
openSUSE Leap 15.6	MozillaThunderbird-translations-other	140.4.0-150200.8.242.1
SUSE Linux Enterprise 15.6	MozillaThunderbird	140.4.0-150200.8.242.1
SUSE Linux Enterprise 15.6	MozillaThunderbird-translations-common	140.4.0-150200.8.242.1
SUSE Linux Enterprise 15.6	MozillaThunderbird-translations-other	140.4.0-150200.8.242.1
SUSE Linux Enterprise 15.7	MozillaThunderbird	140.4.0-150200.8.242.1
SUSE Linux Enterprise 15.7	MozillaThunderbird-translations-common	140.4.0-150200.8.242.1
SUSE Linux Enterprise 15.7	MozillaThunderbird-translations-other	140.4.0-150200.8.242.1

Referencias

Las 37 referencias