Bug 34743 - Thunderbird 140.5
Summary: Thunderbird 140.5
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA9-32-OK MGA9-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2025-11-12 10:50 CET by Nicolas Salguero
Modified: 2025-11-19 03:17 CET (History)
5 users (show)

See Also:
Source RPM: thunderbird, thunderbird-l10n
CVE: CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015, CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019, CVE-2025-13020
Status comment:


Attachments

Description Nicolas Salguero 2025-11-12 10:50:51 CET
Mozilla has released Thunderbird 140.5 on November 12:
https://www.thunderbird.net/en-US/thunderbird/140.5.0esr/releasenotes/

Security issues fixed:
https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird140.5
Nicolas Salguero 2025-11-12 10:51:01 CET

Source RPM: (none) => thunderbird, thunderbird-l10n
Whiteboard: (none) => MGA9TOO

Comment 1 Lewis Smith 2025-11-12 19:35:03 CET
Another one back to you, Nicolas, because you normally update this SRPM.

Assignee: bugsquad => nicolas.salguero

Comment 2 Nicolas Salguero 2025-11-13 13:41:59 CET
For the moment, the list of security issues is not known but should be the same as for Firefox 140.5. 

Updated packages in core/updates_testing:
========================
thunderbird-140.5.0-1.mga9
thunderbird-af-140.5.0-1.mga9
thunderbird-ar-140.5.0-1.mga9
thunderbird-ast-140.5.0-1.mga9
thunderbird-be-140.5.0-1.mga9
thunderbird-bg-140.5.0-1.mga9
thunderbird-br-140.5.0-1.mga9
thunderbird-ca-140.5.0-1.mga9
thunderbird-cs-140.5.0-1.mga9
thunderbird-cy-140.5.0-1.mga9
thunderbird-da-140.5.0-1.mga9
thunderbird-de-140.5.0-1.mga9
thunderbird-dsb-140.5.0-1.mga9
thunderbird-el-140.5.0-1.mga9
thunderbird-en_CA-140.5.0-1.mga9
thunderbird-en_GB-140.5.0-1.mga9
thunderbird-en_US-140.5.0-1.mga9
thunderbird-es_AR-140.5.0-1.mga9
thunderbird-es_ES-140.5.0-1.mga9
thunderbird-es_MX-140.5.0-1.mga9
thunderbird-et-140.5.0-1.mga9
thunderbird-eu-140.5.0-1.mga9
thunderbird-fi-140.5.0-1.mga9
thunderbird-fr-140.5.0-1.mga9
thunderbird-fy_NL-140.5.0-1.mga9
thunderbird-ga_IE-140.5.0-1.mga9
thunderbird-gd-140.5.0-1.mga9
thunderbird-gl-140.5.0-1.mga9
thunderbird-he-140.5.0-1.mga9
thunderbird-hr-140.5.0-1.mga9
thunderbird-hsb-140.5.0-1.mga9
thunderbird-hu-140.5.0-1.mga9
thunderbird-hy_AM-140.5.0-1.mga9
thunderbird-id-140.5.0-1.mga9
thunderbird-is-140.5.0-1.mga9
thunderbird-it-140.5.0-1.mga9
thunderbird-ja-140.5.0-1.mga9
thunderbird-ka-140.5.0-1.mga9
thunderbird-kab-140.5.0-1.mga9
thunderbird-kk-140.5.0-1.mga9
thunderbird-ko-140.5.0-1.mga9
thunderbird-lt-140.5.0-1.mga9
thunderbird-lv-140.5.0-1.mga9
thunderbird-ms-140.5.0-1.mga9
thunderbird-nb_NO-140.5.0-1.mga9
thunderbird-nl-140.5.0-1.mga9
thunderbird-nn_NO-140.5.0-1.mga9
thunderbird-pa_IN-140.5.0-1.mga9
thunderbird-pl-140.5.0-1.mga9
thunderbird-pt_BR-140.5.0-1.mga9
thunderbird-pt_PT-140.5.0-1.mga9
thunderbird-ro-140.5.0-1.mga9
thunderbird-ru-140.5.0-1.mga9
thunderbird-sk-140.5.0-1.mga9
thunderbird-sl-140.5.0-1.mga9
thunderbird-sq-140.5.0-1.mga9
thunderbird-sr-140.5.0-1.mga9
thunderbird-sv_SE-140.5.0-1.mga9
thunderbird-th-140.5.0-1.mga9
thunderbird-tr-140.5.0-1.mga9
thunderbird-uk-140.5.0-1.mga9
thunderbird-uz-140.5.0-1.mga9
thunderbird-vi-140.5.0-1.mga9
thunderbird-zh_CN-140.5.0-1.mga9
thunderbird-zh_TW-140.5.0-1.mga9

from SRPMS:
thunderbird-140.5.0-1.mga9.src.rpm
thunderbird-l10n-140.5.0-1.mga9.src.rpm

Status: NEW => ASSIGNED
Version: Cauldron => 9
Assignee: nicolas.salguero => qa-bugs
Whiteboard: MGA9TOO => (none)

Comment 3 Herman Viaene 2025-11-13 16:06:27 CET
MGA9-64 server Plasma Wayland on Compaq H000SB
No installation issues.
First deleted existing profile, then started thunderbird and initiated hotmail account.
Send and receive mails without and with attachment, all OK.
Connected to my online calendar: works OK.

CC: (none) => herman.viaene

Comment 4 Jose Manuel López 2025-11-14 09:13:41 CET
Updated from testing repos.

Without issues.

Contacts ok.
Task and calendar ok.
Settings and spanish language ok.
Unified folders ok.
Imap and Pop3 accounts ok.
Signatures ok.

CC: (none) => Joselp

Comment 5 Morgan Leijström 2025-11-14 15:57:25 CET
OK x86_64, Plasma, on my workstation svarten

Plasma X11, Swedish locale
Intel Core i7 870, GPU: AMD Navi 24 Radeon RX 6400
Machine details see Firefox bug

[morgan@svarten ~]$ thunderbird --version
Mozilla Thunderbird 140.5.0esr


Repeated tests like I use to perform:

Closed Thunderbird, data backup, updated, started:
Thunderbird just keep working OK:
Swedish locale
Settings and local mail kept
IMAP (offline, IMAP to synk to server)
SMTP
Sent and received mail with inline png and attached pdf
Viewed attached pdf in Thunderbird, and printed to network printer.

I do not use calendar nor tasks or filters.

CC: (none) => fri

katnatek 2025-11-14 19:55:14 CET

CVE: (none) => CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015, CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019, CVE-2025-13020

katnatek 2025-11-14 21:11:27 CET

Keywords: (none) => advisory

Comment 6 Thomas Andrews 2025-11-15 02:48:12 CET
MGA9-64 Plasma, US English version. No installation issues.

Sent and received POP mail, opened a pdf attachment, used the quick filter to display messages from one source. I do not use the calendar.

CC: (none) => andrewsfarm

Comment 7 Morgan Leijström 2025-11-17 19:16:11 CET
This is a prominent program.
Can someone test this on 32 bit?
 (José, you did not tell which architecture in comment 4)
Comment 8 Jose Manuel López 2025-11-18 09:44:29 CET
Sorry, I have Mageia 9 x86_64 Plasma Kde. I haven't computers with x586 architectures.
Comment 9 Thomas Andrews 2025-11-19 01:48:57 CET
MGA9-32 Xfce in VirtualBox. No installation issues.

I don't have any accounts configured in the guest, but I spent some time checking various settings, switched to the Classic layout, with no issues. Should be good enough.

Validating.

CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update
Whiteboard: (none) => MGA9-32-OK MGA9-64-OK

Comment 10 Mageia Robot 2025-11-19 03:17:21 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2025-0305.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.