Skip to content
OpenAdvisories
High ELSA-2025-10195 1 CVE

Important: thunderbird security update (Oracle Linux 10)

Published Jul 2, 2025 · Updated Jul 2, 2025

Ecosystem: Oracle Linux

Summary

[128.12.0-1.0.1]
- Add Oracle prefs

[128.12.0-1]
- Update to 128.12.0 build1

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 thunderbird 0:128.12.0-1.0.1.el10_0

Vulnerabilities 1

  • Medium 6.5
    CVE-2025-5986

    Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links

    A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data …

    Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu