
correct requires and provides handling (boo#1076907) The following tracked packaging changes are included: Fix various problems when forwarding messages inline when using "simple"

Thunderbird will now prompt to compact IMAP folders even if the account The following upstream changes are included: Mailnews.p7m_subparts_external needs to be set to true for added Option for not decrypting subordinate message parts that otherwise might The following options are available for added security in certain CVE-2018-12374: Using form to exfiltrate encrypted mail part by pressing CVE-2018-12373: S/MIME plaintext can be leaked through HTML CVE-2018-12372: S/MIME and PGP decryption oracles can be built with HTML Security issues fixed that affect e-mail privacy and integrity (including CVE-2018-5188: Memory safety bugs fixed in Thunderbird 52.9.0 CVE-2018-12366: Invalid data handling during QCMS transformations CVE-2018-12365: Compromised IPC child process can list local filenames CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins CVE-2018-12363: Use-after-free when appending DOM nodes CVE-2018-12362: Integer overflow in SSSE3 scaler CVE-2018-12359: Buffer overflow using computed size of canvas element

Security issues fixed, inherited from the Mozilla common code base (MFSA
#MOZILLA THUNDERBIRD 2018 UPDATE#
This update for Mozilla Thunderbird to version 52.9.0 fixes multiple SUSE Package Hub for SUSE Linux Enterprise 12Īn update that fixes 11 vulnerabilities is now available.

OpenSUSE Security Update: Security update for Mozilla Thunderbird Moderate: Security update for Mozilla Thunderbird
