RHSA-2025:7435: Important: thunderbird security update
Important: thunderbird security update
Other sources
Mozilla Thunderbird is a standalone mail and newsgroup client.<br>Security Fix(es):<br><li> thunderbird: User Interface (UI) Misrepresentation of attachment URL (CVE-2025-3523)</li> <li> thunderbird: Information Disclosure of /tmp directory listing (CVE-2025-2830)</li> <li> thunderbird: Leak of hashed Window credentials via crafted attachment URL (CVE-2025-3522)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:7435?
The severity of RHSA-2025:7435 is classified as important.
What vulnerabilities are addressed in RHSA-2025:7435?
RHSA-2025:7435 addresses vulnerabilities including CVE-2025-3523 related to user interface misrepresentation of attachment URLs and information disclosure of the /tmp directory.
How do I fix RHSA-2025:7435?
To fix RHSA-2025:7435, you should update your Mozilla Thunderbird to the latest version provided by Red Hat.
What products are affected by RHSA-2025:7435?
Affected products by RHSA-2025:7435 include Red Hat Enterprise Linux for x86_64, IBM z Systems, ARM 64, and Power, little endian.
When was RHSA-2025:7435 released?
RHSA-2025:7435 was released to address important security vulnerabilities in Mozilla Thunderbird.