SUSE-SU-2025:01813-1
SUSE-SU-2025:01813-1 · Security update for MozillaThunderbird
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.10.2 (MFSA 2025-40, bsc#1243303): Security fixes: - CVE-2025-4918: Out-of-bounds access when resolving Promise objects (bmo#1966612) - CVE-2025-4919: Out-of-bounds access when optimizing linear sums (bmo#1966614) Other fixes: - Messages could not be viewed if the profile used a UNC path (bmo#1966256) - Visual and UX improvements (bmo#1964156)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
mozillathunderbird SUSE:Linux Enterprise Module for Package Hub 15 SP6
- Affected ranges
- ECOSYSTEM: < 128.10.2-150200.8.218.1
Update to 128.10.2-150200.8.218.1
mozillathunderbird SUSE:Linux Enterprise Module for Package Hub 15 SP7
- Affected ranges
- ECOSYSTEM: < 128.10.2-150200.8.218.1
Update to 128.10.2-150200.8.218.1
mozillathunderbird SUSE:Linux Enterprise Workstation Extension 15 SP6
- Affected ranges
- ECOSYSTEM: < 128.10.2-150200.8.218.1
Update to 128.10.2-150200.8.218.1
mozillathunderbird SUSE:Linux Enterprise Workstation Extension 15 SP7
- Affected ranges
- ECOSYSTEM: < 128.10.2-150200.8.218.1
Update to 128.10.2-150200.8.218.1
mozillathunderbird openSUSE:Leap 15.6
- Affected ranges
- ECOSYSTEM: < 128.10.2-150200.8.218.1
Update to 128.10.2-150200.8.218.1