Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 12 | thunderbird | 1:140.7.1esr-1~deb12u1 |
| Debian · 13 | thunderbird | 1:140.7.1esr-1~deb13u1 |
Vulnerabilities 1
-
Medium 4.3
CSS-based exfiltration of the content from partially encrypted emails when allowing remote content
When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles f…