SUSE-SU-2025:01813-1: MozillaThunderbird&distro=openSUSE Leap 15.6
Vulnerability summary
SUSE-SU-2025:01813-1 is a vulnerability in MozillaThunderbird&distro=openSUSE Leap 15.6 with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 04-06-2025PublishedVulnerability first disclosed.
- 23-03-2026Last modifiedVulnerability information updated.
Description
Security update for MozillaThunderbird This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.10.2 (MFSA 2025-40, bsc#1243303): Security fixes: - CVE-2025-4918: Out-of-bounds access when resolving Promise objects (bmo#1966612) - CVE-2025-4919: Out-of-bounds access when optimizing linear sums (bmo#1966614) Other fixes: - Messages could not be viewed if the profile used a UNC path (bmo#1966256) - Visual and UX improvements (bmo#1964156)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse4 products
- MozillaThunderbird&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6< 128.10.2-150200.8.218.1
- MozillaThunderbird&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 128.10.2-150200.8.218.1
- MozillaThunderbird&distro=SUSE Linux Enterprise Workstation Extension 15 SP6< 128.10.2-150200.8.218.1
- MozillaThunderbird&distro=SUSE Linux Enterprise Workstation Extension 15 SP7< 128.10.2-150200.8.218.1
Opensuse1 product
- MozillaThunderbird&distro=openSUSE Leap 15.6< 128.10.2-150200.8.218.1
2 vendors · 5 products