Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0388-1

Опубликовано: 05 фев. 2026
Источник: suse-cvrf

Описание

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Update to Mozilla Thunderbird 140.7.1 MFSA 2026-08 (bsc#1257397):

  • CVE-2026-0818: CSS-based exfiltration of the content from partially encrypted emails when allowing remote content

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP7
MozillaThunderbird-140.7.1-150200.8.254.1
MozillaThunderbird-translations-common-140.7.1-150200.8.254.1
MozillaThunderbird-translations-other-140.7.1-150200.8.254.1
SUSE Linux Enterprise Workstation Extension 15 SP7
MozillaThunderbird-140.7.1-150200.8.254.1
MozillaThunderbird-translations-common-140.7.1-150200.8.254.1
MozillaThunderbird-translations-other-140.7.1-150200.8.254.1
openSUSE Leap 15.6
MozillaThunderbird-140.7.1-150200.8.254.1
MozillaThunderbird-translations-common-140.7.1-150200.8.254.1
MozillaThunderbird-translations-other-140.7.1-150200.8.254.1

Ссылки

Описание

When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles from the outer messages were active. If the user had additionally allowed loading of the remote content referenced by the outer email message, and the email was crafted by the sender using a combination of CSS rules and fonts and animations, then it was possible to extract the secret contents of the email. This vulnerability affects Thunderbird < 147.0.1 and Thunderbird < 140.7.1.

Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.7.1-150200.8.254.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.7.1-150200.8.254.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.7.1-150200.8.254.1
SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.7.1-150200.8.254.1
Ссылки