This update for MozillaThunderbird fixes the following issues:
Update to Mozilla Thunderbird 128.10.2 (MFSA 2025-40, bsc#1243303):
Security fixes:
- CVE-2025-4918: Out-of-bounds access when resolving Promise objects (bmo#1966612)
- CVE-2025-4919: Out-of-bounds access when optimizing linear sums (bmo#1966614)
Other fixes:
- Messages could not be viewed if the profile used a UNC path (bmo#1966256)
- Visual and UX improvements (bmo#1964156)
This update for MozillaThunderbird fixes the following issues:
Update to Mozilla Thunderbird 128.10.1.
Security fixes:
- MFSA 2025-34 (bsc#1243216)
* CVE-2025-3875: Sender Spoofing via Malformed From Header in Thunderbird.
* CVE-2025-3877: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links.
* CVE-2025-3909: JavaScript Execution via Spoofed PDF Attachment and file:/// Link.
* CVE-2025-3932: Tracking Links in Attachments Bypassed Remote Content Blocking.
Other bug fixes:
- Fixed: standalone message windows/tabs that no longer responded after folder compaction.
- Fixed: Thunderbird could c