Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

openSUSE 15.6: 2025:1506-1 important: MozillaThunderbird Memory Flaws

opensuse
Calendar Grey May 7, 2025
Dist Opensuse Esm H88
An important patch for MozillaFirefox resolves several significant vulnerabilities concerning security on Fedora systems. Update without delay.
An update that solves seven vulnerabilities can now be installed.

Description

This update for MozillaThunderbird fixes the following issues:

Mozilla Thunderbird ESR 128.10 update (bsc#1241621):

* CVE-2025-4082: WebGL shader attribute memory corruption in Thunderbird for

macOS.

* CVE-2025-4087: Unsafe attribute access during XPath parsing.

* CVE-2025-4093: Memory safety bug fixed in Firefox ESR 128.10 and

Thunderbird.

* CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138,

Firefox ESR 128.10, and Thunderbird 128.10.

* CVE-2025-4083: Process isolation bypass using "javascript:" URI links in

cross-origin frames.

* CVE-2025-4084: Potential local code execution in "copy as cURL" command.

* CVE-2025-2817: Privilege escalation in Thunderbird Updater.

Topics%20covered

Topics Covered

security advisory security update memory issues openSUSE MozillaThunderbird important rating

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Workstation Extension 15 SP6

zypper in -t patch SUSE-SLE-Product-WE-15-SP6-2025-1506=1

* openSUSE Leap 15.6

zypper in -t patch openSUSE-SLE-15.6-2025-1506=1

* SUSE Package Hub 15 15-SP6

zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-1506=1

Package List

* SUSE Linux Enterprise Workstation Extension 15 SP6 (x86_64)

* MozillaThunderbird-debugsource-128.10.0-150200.8.212.1

* MozillaThunderbird-128.10.0-150200.8.212.1

* MozillaThunderbird-translations-common-128.10.0-150200.8.212.1

* MozillaThunderbird-debuginfo-128.10.0-150200.8.212.1

* MozillaThunderbird-translations-other-128.10.0-150200.8.212.1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)

* MozillaThunderbird-debugsource-128.10.0-150200.8.212.1

* MozillaThunderbird-128.10.0-150200.8.212.1

* MozillaThunderbird-translations-common-128.10.0-150200.8.212.1

* MozillaThunderbird-debuginfo-128.10.0-150200.8.212.1

* MozillaThunderbird-translations-other-128.10.0-150200.8.212.1

* SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x)

* MozillaThunderbird-debugsource-128.10.0-150200.8.212.1

* MozillaThunderbird-128.10.0-150200.8.212.1

* MozillaThunderbird-translations-common-128.10.0-150200.8.212.1

* MozillaThunderbird-debuginfo-128.10.0-150200.8.212.1

*...

Read the Full Advisory

References

* bsc#1241621

## References:

* https://www.suse.com/security/cve/CVE-2025-2817.html

* https://www.suse.com/security/cve/CVE-2025-4082.html

* https://www.suse.com/security/cve/CVE-2025-4083.html

* https://www.suse.com/security/cve/CVE-2025-4084.html

* https://www.suse.com/security/cve/CVE-2025-4087.html

* https://www.suse.com/security/cve/CVE-2025-4091.html

* https://www.suse.com/security/cve/CVE-2025-4093.html

* https://bugzilla.suse.com/show_bug.cgi?id=1241621

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:1506-1
Release Date: 2025-05-07T12:13:22Z
Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 * SUSE Package Hub 15 15-SP6

Topics%20covered

Topics Covered

security advisory security update memory issues openSUSE MozillaThunderbird important rating

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here