Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Thunderbird Security Update - Unpatched Vulnerabilities

published 11 months ago

Summary

Red Hat Thunderbird users are advised to update their software to fix security issues that could allow an attacker to execute malicious code or steal sensitive information. This update is essential to protect against potential threats and maintain email security. Users should install the latest version as soon as possible.

What to do

Update redhat thunderbird to version 0:140.4.0-2.el9_2.
Update redhat thunderbird-debuginfo to version 0:140.4.0-2.el9_2.
Update redhat thunderbird-debugsource to version 0:140.4.0-2.el9_2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.2::appstream	redhat	thunderbird	< 0:140.4.0-2.el9_2 Fix: upgrade to 0:140.4.0-2.el9_2
Red Hat:rhel_e4s:9.2::appstream	redhat	thunderbird-debuginfo	< 0:140.4.0-2.el9_2 Fix: upgrade to 0:140.4.0-2.el9_2
Red Hat:rhel_e4s:9.2::appstream	redhat	thunderbird-debugsource	< 0:140.4.0-2.el9_2 Fix: upgrade to 0:140.4.0-2.el9_2

Original advisory text

Red Hat Security Advisory: thunderbird security update

References

https://access.redhat.com/errata/RHSA-2025:19944 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2403774 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2403776 Third Party Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2403763 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2403765 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2403768 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2403770 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2403769 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19944.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-11708 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-11708 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-11708 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-83/#CVE-2025-11708 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-85/#CVE-2025-11708 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-11709 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-11709 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-11709 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-83/#CVE-2025-11709 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-85/#CVE-2025-11709 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-11710 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-11710 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-11710 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-83/#CVE-2025-11710 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-85/#CVE-2025-11710 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-11711 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-11711 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-11711 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-83/#CVE-2025-11711 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-85/#CVE-2025-11711 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-11712 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-11712 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-11712 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-83/#CVE-2025-11712 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-85/#CVE-2025-11712 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-11714 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-11714 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-11714 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-83/#CVE-2025-11714 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-85/#CVE-2025-11714 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-11715 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-11715 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-11715 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-83/#CVE-2025-11715 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-85/#CVE-2025-11715 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.5 High

Timeline

Published10 Nov 2025

Updated4 Jul 2026

First seen4 Jul 2026

Sources

RHSA-2025:19944 · OSV

Track software like this

Free during beta