Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02546-1

Опубликовано: 30 июл. 2025
Источник: suse-cvrf

Описание

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Update to Mozilla Thunderbird 140.1 (MFSA 2025-63) (bsc#1246664):

  • CVE-2025-8027: JavaScript engine only wrote partial return value to stack (bmo#1968423)
  • CVE-2025-8028: Large branch table could lead to truncated instruction (bmo#1971581)
  • CVE-2025-8029: javascript: URLs executed on object and embed tags (bmo#1928021)
  • CVE-2025-8036: DNS rebinding circumvents CORS (bmo#1960834)
  • CVE-2025-8037: Nameless cookies shadow secure cookies (bmo#1964767)
  • CVE-2025-8030: Potential user-assisted code execution in 'Copy as cURL' command (bmo#1968414)
  • CVE-2025-8031: Incorrect URL stripping in CSP reports (bmo#1971719)
  • CVE-2025-8032: XSLT documents could bypass CSP (bmo#1974407)
  • CVE-2025-8038: CSP frame-src was not correctly enforced for paths (bmo#1808979)
  • CVE-2025-8039: Search terms persisted in URL bar (bmo#1970997)
  • CVE-2025-8033: Incorrect JavaScript state machine for generators (bmo#1973990)
  • CVE-2025-8034: Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
  • CVE-2025-8040: Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
  • CVE-2025-8035: Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 (bmo#1975961, bmo#1975961, bmo#1975961)

Update to Mozilla Thunderbird 140.0.1 (MFSA 2025-54) (bsc#1244670):

  • CVE-2025-6424: Use-after-free in FontFaceSet (bmo#1966423)
  • CVE-2025-6425: The WebCompat WebExtension shipped exposed a persistent UUID (bmo#1717672)
  • CVE-2025-6426: No warning when opening executable terminal files on macOS (bmo#1964385)
  • CVE-2025-6427: connect-src Content Security Policy restriction could be bypassed (bmo#1966927)
  • CVE-2025-6429: Incorrect parsing of URLs could have allowed embedding of youtube.com (bmo#1970658)
  • CVE-2025-6430: Content-Disposition header ignored when a file is included in an embed or object tag (bmo#1971140)
  • CVE-2025-6432: DNS Requests leaked outside of a configured SOCKS proxy (bmo#1943804)
  • CVE-2025-6433: WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate (bmo#1954033)
  • CVE-2025-6434: HTTPS-Only exception screen lacked anti-clickjacking delay (bmo#1955182)
  • CVE-2025-6435: Save as in Devtools could download files without sanitizing the extension (bmo#1950056, bmo#1961777)
  • CVE-2025-6436: Memory safety bugs fixed in Firefox 140 and Thunderbird 140 (bmo#1941377, bmo#1960948, bmo#1966187, bmo#1966505, bmo#1970764)

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP6
MozillaThunderbird-140.1.0-150200.8.230.1
MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7
MozillaThunderbird-140.1.0-150200.8.230.1
MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Workstation Extension 15 SP6
MozillaThunderbird-140.1.0-150200.8.230.1
MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Workstation Extension 15 SP7
MozillaThunderbird-140.1.0-150200.8.230.1
MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
openSUSE Leap 15.6
MozillaThunderbird-140.1.0-150200.8.230.1
MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
MozillaThunderbird-translations-other-140.1.0-150200.8.230.1

Ссылки

Описание

A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox < 140, Firefox ESR < 115.25, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox < 140, Firefox ESR < 115.25, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

The executable file warning did not warn users before opening files with the `terminal` extension. *This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability affects Firefox < 140 and Thunderbird < 140.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `&lt;embed&gt;` or `&lt;object&gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140 and Thunderbird < 140.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability affects Firefox < 140 and Thunderbird < 140.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140 and Thunderbird < 140.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox < 140 and Thunderbird < 140.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 140 and Thunderbird < 140.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

Firefox executed `javascript:` URLs when used in `object` and `embed` tags. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

Insufficient escaping in the "Copy as cURL" feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

Firefox cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

Firefox ignored paths when checking the validity of navigations in a frame. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки

Описание

Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1

Ссылки
Уязвимость SUSE-SU-2025:02546-1