RHSA-2025:8608: Important: thunderbird security update
Important: thunderbird security update
Other sources
Mozilla Thunderbird is a standalone mail and newsgroup client.<br>Security Fix(es):<br><li> firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)</li> <li> firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)</li> <li> firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)</li> <li> firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)</li> <li> firefox: thunderbird: Memory safety bugs (CVE-2025-5268)</li> <li> firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)</li> <li> firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)</li> <li> firefox: thunderbird: Memory safety bug (CVE-2025-5269)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:8608?
The severity of RHSA-2025:8608 is classified as Important.
How do I fix RHSA-2025:8608?
To fix RHSA-2025:8608, you should apply the provided security update to your affected Red Hat Enterprise Linux systems.
Which products are affected by RHSA-2025:8608?
RHSA-2025:8608 affects multiple products including Red Hat Enterprise Linux for IBM z Systems, Power, and ARM architectures.
Is there a workaround for RHSA-2025:8608?
No official workaround is recommended for RHSA-2025:8608; updating is the best course of action.
When was RHSA-2025:8608 released?
RHSA-2025:8608 was released on 2025-04-10.