Security Update for Thunderbird

thunderbird Updated 02 Oct 2025

Summary

25/01/2024
N/A
Yes i
Unrated
Not published

DLA-3720-1: thunderbird - security update. Affects thunderbird versions < 1:115.7.0-1~deb10u1. Fixed in 1:115.7.0-1~deb10u1. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Lume, the Habilume companion Habilume Habit tracker with a companion that grows with you Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent. App Store Google Play

Background

Thunderbird is an open-source email client developed by Mozilla. It provides various features for managing emails, contacts, and calendars. The Debian 10 version of Thunderbird is affected by a security vulnerability.

Vulnerability Detail

The vulnerability (CVE-2024-0741, CVE-2024-0742, CVE-2024-0746, CVE-2024-0747, CVE-2024-0749, CVE-2024-0750, CVE-2024-0751, CVE-2024-0753, CVE-2024-0755) in Thunderbird allows attackers to exploit certain weaknesses and potentially gain unauthorized access to sensitive information or execute arbitrary code on the affected system. The details of the vulnerability can be found in the Debian Open Source Vulnerability database.

How To Fix

Minimum fixed version

1:115.7.0-1~deb10u1

This is the first release that contains the fix.

sudo apt-get install --only-upgrade thunderbird

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Workaround

No specific workaround has been mentioned for this vulnerability.

Conclusion

It is crucial to update Thunderbird to the recommended version or later to mitigate the identified vulnerabilities. For further support on vulnerability remediation, you can reach out to DevNack.com.

See every vulnerability recorded for thunderbird →

Share this vulnerability

FAQ

Thunderbird is an open-source email client developed by Mozilla.

This vulnerability could potentially allow attackers to gain unauthorized access to sensitive information or execute arbitrary code on the affected system.

To fix the vulnerability, update Thunderbird to version 1:115.7.0-1~deb10u1 or later.

No specific workaround has been mentioned for this vulnerability.

You can find more information about this vulnerability in the Debian Open Source Vulnerability database.

Related vulnerabilities

Recent vulnerabilities recorded for thunderbird.

Sponsored Lume, the Habilume companion Habilume Habit tracker with a companion that grows with you Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent. App Store Google Play

How To Fix

Minimum fixed version

1:115.7.0-1~deb10u1

This is the first release that contains the fix.

sudo apt-get install --only-upgrade thunderbird

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback