Описание
ELSA-2025-8203: thunderbird security update (IMPORTANT)
[128.10.1-1.0.1]
- Fix prefs for new nss [Orabug: 37079813]
- Add Oracle prefs
[128.10.1]
- Add OpenELA debranding
[128.10.1-1]
- Update to 128.10.1
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
thunderbird
128.10.1-1.0.1.el9_6
Oracle Linux x86_64
thunderbird
128.10.1-1.0.1.el9_6
Связанные CVE
Связанные уязвимости
Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From header contains an (invalid) value "Spoofed Name ", Thunderbird treats spoofed@example.com as the actual address. This vulnerability affects Thunderbird < 128.10.1 and Thunderbird < 138.0.1.
Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From header contains an (invalid) value "Spoofed Name ", Thunderbird treats spoofed@example.com as the actual address. This vulnerability affects Thunderbird < 128.10.1 and Thunderbird < 138.0.1.