RHSA-2025:4229: Important: thunderbird security update
Important: thunderbird security update
Other sources
Mozilla Thunderbird is a standalone mail and newsgroup client.<br>Security Fix(es):<br><li> thunderbird: User Interface (UI) Misrepresentation of attachment URL (CVE-2025-3523)</li> <li> thunderbird: Information Disclosure of /tmp directory listing (CVE-2025-2830)</li> <li> thunderbird: Leak of hashed Window credentials via crafted attachment URL (CVE-2025-3522)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What security vulnerabilities are addressed in RHSA-2025:4229?
RHSA-2025:4229 addresses a user interface misrepresentation of attachment URLs and potential information disclosure of the /tmp directory.
How do I resolve the issues outlined in RHSA-2025:4229?
To resolve the issues in RHSA-2025:4229, update Thunderbird to version 128.9.2-1.el9_5.
Is RHSA-2025:4229 applicable to all versions of Red Hat Enterprise Linux?
RHSA-2025:4229 specifically applies to Red Hat Enterprise Linux 8 and its specific architectures.
What is the severity level of RHSA-2025:4229?
The severity level of RHSA-2025:4229 is classified as Important.
Are there any specific packages that need to be updated for RHSA-2025:4229?
For RHSA-2025:4229, the thunderbird package and its debuginfo and debugsource variants need to be updated.