Bug 34993 - Thunderbird 140.7
Summary: Thunderbird 140.7
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
Depends on: 34987
Blocks:
  Show dependency treegraph
 
Reported: 2026-01-14 08:10 CET by Nicolas Salguero
Modified: 2026-01-20 04:26 CET (History)
5 users (show)

See Also:
Source RPM: thunderbird, thunderbird-l10n
CVE: CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880, CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884, CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890, CVE-2026-0891
Status comment:
andrewsfarm: test_passed_mga9_64+


Attachments

Description Nicolas Salguero 2026-01-14 08:10:42 CET
Mozilla has released Thunderbird 140.7 on January 13:
https://www.thunderbird.net/en-US/thunderbird/140.7.0esr/releasenotes/

Security issues fixed:
https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird140.7
Nicolas Salguero 2026-01-14 08:10:55 CET

Whiteboard: (none) => MGA9TOO
Flags: (none) => affects_mga9+
Source RPM: (none) => thunderbird, thunderbird-l10n

Nicolas Salguero 2026-01-14 08:11:39 CET

Depends on: (none) => 34987

Nicolas Salguero 2026-01-14 16:57:25 CET

Assignee: bugsquad => nicolas.salguero

Comment 1 Nicolas Salguero 2026-01-15 09:08:38 CET
Suggested advisory:
========================

The updated packages fix security vulnerabilities.

References:
https://www.thunderbird.net/en-US/thunderbird/140.7.0esr/releasenotes/
https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird140.7
========================

Updated packages in core/updates_testing:
========================
thunderbird-140.7.0-1.mga9
thunderbird-af-140.7.0-1.mga9
thunderbird-ar-140.7.0-1.mga9
thunderbird-ast-140.7.0-1.mga9
thunderbird-be-140.7.0-1.mga9
thunderbird-bg-140.7.0-1.mga9
thunderbird-br-140.7.0-1.mga9
thunderbird-ca-140.7.0-1.mga9
thunderbird-cs-140.7.0-1.mga9
thunderbird-cy-140.7.0-1.mga9
thunderbird-da-140.7.0-1.mga9
thunderbird-de-140.7.0-1.mga9
thunderbird-dsb-140.7.0-1.mga9
thunderbird-el-140.7.0-1.mga9
thunderbird-en_CA-140.7.0-1.mga9
thunderbird-en_GB-140.7.0-1.mga9
thunderbird-en_US-140.7.0-1.mga9
thunderbird-es_AR-140.7.0-1.mga9
thunderbird-es_ES-140.7.0-1.mga9
thunderbird-es_MX-140.7.0-1.mga9
thunderbird-et-140.7.0-1.mga9
thunderbird-eu-140.7.0-1.mga9
thunderbird-fi-140.7.0-1.mga9
thunderbird-fr-140.7.0-1.mga9
thunderbird-fy_NL-140.7.0-1.mga9
thunderbird-ga_IE-140.7.0-1.mga9
thunderbird-gd-140.7.0-1.mga9
thunderbird-gl-140.7.0-1.mga9
thunderbird-he-140.7.0-1.mga9
thunderbird-hr-140.7.0-1.mga9
thunderbird-hsb-140.7.0-1.mga9
thunderbird-hu-140.7.0-1.mga9
thunderbird-hy_AM-140.7.0-1.mga9
thunderbird-id-140.7.0-1.mga9
thunderbird-is-140.7.0-1.mga9
thunderbird-it-140.7.0-1.mga9
thunderbird-ja-140.7.0-1.mga9
thunderbird-ka-140.7.0-1.mga9
thunderbird-kab-140.7.0-1.mga9
thunderbird-kk-140.7.0-1.mga9
thunderbird-ko-140.7.0-1.mga9
thunderbird-lt-140.7.0-1.mga9
thunderbird-lv-140.7.0-1.mga9
thunderbird-ms-140.7.0-1.mga9
thunderbird-nb_NO-140.7.0-1.mga9
thunderbird-nl-140.7.0-1.mga9
thunderbird-nn_NO-140.7.0-1.mga9
thunderbird-pa_IN-140.7.0-1.mga9
thunderbird-pl-140.7.0-1.mga9
thunderbird-pt_BR-140.7.0-1.mga9
thunderbird-pt_PT-140.7.0-1.mga9
thunderbird-ro-140.7.0-1.mga9
thunderbird-ru-140.7.0-1.mga9
thunderbird-sk-140.7.0-1.mga9
thunderbird-sl-140.7.0-1.mga9
thunderbird-sq-140.7.0-1.mga9
thunderbird-sr-140.7.0-1.mga9
thunderbird-sv_SE-140.7.0-1.mga9
thunderbird-th-140.7.0-1.mga9
thunderbird-tr-140.7.0-1.mga9
thunderbird-uk-140.7.0-1.mga9
thunderbird-uz-140.7.0-1.mga9
thunderbird-vi-140.7.0-1.mga9
thunderbird-zh_CN-140.7.0-1.mga9
thunderbird-zh_TW-140.7.0-1.mga9

from SRPMS:
thunderbird-140.7.0-1.mga9.src.rpm
thunderbird-l10n-140.7.0-1.mga9.src.rpm

Assignee: nicolas.salguero => qa-bugs
Version: Cauldron => 9
Status: NEW => ASSIGNED
Whiteboard: MGA9TOO => (none)
Flags: affects_mga9+ => (none)

Comment 2 Herman Viaene 2026-01-15 14:46:47 CET
MGA9-64 server Plasma Wayland on Compaq H000SB.
No installation issues.
Deleted .thunderbird from home and start account creation in thunderbird from scratch.
Used my gmail account to configure thunderbird and added calendar.
Calendar works OK and sending and receiving email without and with attachments works OK.

CC: (none) => herman.viaene

Comment 3 Jose Manuel López 2026-01-15 21:04:55 CET
Hi,

Updated in mga9 Plasma x64 without issues.

Works fine for the moment. 
Calendar ok
Task ok.
Signatures ok.
Pop3 and Imap accounts ok.
Spanish ok.
Sync of calendar web ok.

I am using it all day whitout problems.

Greetings!

CC: (none) => Joselp

Comment 4 Morgan Leijström 2026-01-15 21:19:34 CET
OK x86_64, Plasma, on my workstation svarten

Plasma X11, Swedish locale
Intel Core i7 870, GPU: AMD Navi 24 Radeon RX 6400

$ thunderbird --version
Mozilla Thunderbird 140.7.0esr

__Repeated tests like I use to perform:
Closed Thunderbird, data backup, updated, started:
Thunderbird just keep working OK:
Swedish locale
Settings and local mail kept
IMAP (offline, IMAP to synk to server)
SMTP
Sent and received mail with inline png and attached pdf
Viewed attached pdf in Thunderbird, and printed to network printer.

I do not use calendar nor tasks or filters.

System and machine details in Bug 34987 comment 7

CC: (none) => fri

katnatek 2026-01-17 01:58:59 CET

CVE: (none) => CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880, CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884, CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890, CVE-2026-0891

katnatek 2026-01-17 02:02:10 CET

Keywords: (none) => advisory

Comment 5 Thomas Andrews 2026-01-20 02:45:05 CET
MGA9-64 Plasma. I've been using the US English version for four days now, sending and receiving POP mail and checking newsgroups. Saved attachments, brought links up in my browser. Looks good here, good enough to let go.

Validating.

Whiteboard: (none) => MGA9-64-OK
Flags: (none) => test_passed_mga9_64+
Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Comment 6 Mageia Robot 2026-01-20 04:26:30 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2026-0014.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.