Opened 45 minutes ago
Last modified 8 minutes ago
#24191 new enhancement
thunderbird-153.6.0esr
| Reported by: | Joe Locash | Owned by: | SecurityAdvisory |
|---|---|---|---|
| Priority: | high | Milestone: | 13.2 |
| Component: | BOOK | Version: | git |
| Severity: | high | Keywords: | |
| Cc: |
Description
What’s Fixed:
- Sent messages could fail to save without displaying a warning
Security fixes:
- CVE-2026-118174: Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment (high)
- CVE-2026-118175: Content of other messages could be included when replying to a crafted message (high)
- CVE-2026-118176: Bypass of remote UNC path restriction in mailbox: URLs (high)
- CVE-2026-118177: Calendar discovery accepted local file and remote network share locations (high)
- CVE-2026-118178: RSS feed could redirect its subscription to a local file or network share (high)
- CVE-2026-118179: Request forgery via news: links (moderate)
- CVE-2026-118180: Matrix homeserver could redirect the chat session to a local file or network share (moderate)
- CVE-2026-110247: Integer overflow in libmime buffer growth could lead to heap corruption (moderate)
- CVE-2026-113869: Use-after-free in S/MIME decryption during a security device password prompt (moderate)
For the full list see: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/
Note:
See TracTickets
for help on using tickets.
Fixed at 66a34c51c7. Leaving open for SA.