Package thunderbird: Information

  • Default inline alert: Version in the repository: 115.8.1-alt1

Source package: thunderbird
Version: 91.5.0-alt1
Latest version according to Repology
Build time:  Jan 12, 2022, 05:35 PM in the task #293351
Category: Networking/Mail
Report package bug
License: MPL-2.0
Summary: Thunderbird is Mozilla's e-mail client
Description: 
Thunderbird is Mozilla's next generation e-mail client. Thunderbird makes
emailing safer, faster and easier than ever before and can also scale to meet
the most sophisticated organizational needs.

The package contains Lightning - an integrated calendar for Thunderbird.

List of rpms provided by this srpm:
rpm-build-thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird (x86_64, ppc64le, i586, aarch64)
thunderbird-wayland (x86_64, ppc64le, i586, aarch64)

Maintainer: Andrey Cherepanov



    1. python3-base
    2. python3-module-pip
    3. python3-module-setuptools
    4. gst-plugins1.0-devel
    5. python3-modules-sqlite3
    6. libstartup-notification-devel
    7. lld12.0-devel
    8. /proc
    9. libstdc++-devel
    10. llvm12.0-devel
    11. doxygen
    12. /dev/shm
    13. makedepend
    14. libnotify-devel
    15. rust
    16. rust-cargo
    17. libnspr-devel
    18. libGL-devel
    19. libnss-devel
    20. libnss-devel-static
    21. libIDL-devel
    22. imake
    23. libgtk+3-devel >= 3.14
    24. libopus-devel
    25. libotr-devel
    26. mozilla-common-devel
    27. libhunspell-devel
    28. gcc-c++
    29. libX11-devel
    30. nasm
    31. libXScrnSaver-devel
    32. libXcomposite-devel
    33. libXcursor-devel
    34. libXdamage-devel
    35. rpm-build-mozilla.org
    36. libpixman-devel
    37. libXext-devel
    38. node
    39. libjpeg-devel
    40. libXft-devel
    41. libXi-devel
    42. libXt-devel
    43. alternatives
    44. libalsa-devel
    45. libproxy-devel
    46. unzip
    47. libcurl-devel
    48. autoconf_2.13
    49. autoconf_2.13
    50. libdbus-glib-devel
    51. xorg-cf-files
    52. browser-plugins-npapi-devel
    53. yasm
    54. libpulseaudio-devel
    55. bzlib-devel
    56. zip
    57. chrpath
    58. libvpx-devel
    59. clang12.0-devel
    60. libdrm-devel
    61. libwireless-devel
    62. libevent-devel
    63. libxkbcommon-devel
    64. libffi-devel

Last changed


Jan. 12, 2022 Andrey Cherepanov 91.5.0-alt1
- New version.
- Security fixes:
  + CVE-2022-22746 Calling into reportValidity could have lead to fullscreen window spoof
  + CVE-2022-22743 Browser window spoof using fullscreen mode
  + CVE-2022-22742 Out-of-bounds memory access when inserting text in edit mode
  + CVE-2022-22741 Browser window spoof using fullscreen mode
  + CVE-2022-22740 Use-after-free of ChannelEventQueue::mOwner
  + CVE-2022-22738 Heap-buffer-overflow in blendGaussianBlur
  + CVE-2022-22737 Race condition when playing audio files
  + CVE-2021-4140 Iframe sandbox bypass with XSLT
  + CVE-2022-22748 Spoofed origin on external protocol launch dialog
  + CVE-2022-22745 Leaking cross-origin URLs through securitypolicyviolation event
  + CVE-2022-22744 The 'Copy as curl' feature in DevTools did not fully escape website-controlled data, potentially leading to command injection
  + CVE-2022-22747 Crash when handling empty pkcs7 sequence
  + CVE-2022-22739 Missing throttling on external protocol launch dialog
  + CVE-2022-22751 Memory safety bugs fixed in Thunderbird 91.5
Dec. 21, 2021 Andrey Cherepanov 91.4.1-alt1
- New version.
- Security fixes:
  + CVE-2021-4126 OpenPGP signature status doesn't consider additional message content
  + CVE-2021-44538 Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow
Dec. 10, 2021 Andrey Cherepanov 91.4.0-alt1
- New version.
- Security fixes:
  + CVE-2021-43536 URL leakage when navigating while executing asynchronous function
  + CVE-2021-43537 Heap buffer overflow when using structured clone
  + CVE-2021-43538 Missing fullscreen and pointer lock notification when requesting both
  + CVE-2021-43539 GC rooting failure when calling wasm instance methods
  + CVE-2021-43541 External protocol handler parameters were unescaped
  + CVE-2021-43542 XMLHttpRequest error codes could have leaked the existence of an external protocol handler
  + CVE-2021-43543 Bypass of CSP sandbox directive when embedding
  + CVE-2021-43545 Denial of Service when using the Location API in a loop
  + CVE-2021-43546 Cursor spoofing could overlay user interface when native cursor is zoomed
  + CVE-2021-43528 JavaScript unexpectedly enabled for the composition area