RLSA-2025:8196

Описание

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

• thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)

• thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)

• thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)

• thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.