Mozilla has released Thunderbird 140.7.1 on January 27: https://www.thunderbird.net/en-US/thunderbird/140.7.1esr/releasenotes/ Security issues fixed: https://www.mozilla.org/en-US/security/advisories/mfsa2026-08/
Flags: (none) => affects_mga9+Source RPM: (none) => thunderbird, thunderbird-l10nCVE: (none) => CVE-2026-0818Whiteboard: (none) => MGA9TOO
Assignee: bugsquad => nicolas.salguero
RPMS: thunderbird-140.7.1-1.mga9 thunderbird-af-140.7.1-1.mga9.noarch.rpm thunderbird-ar-140.7.1-1.mga9.noarch.rpm thunderbird-ast-140.7.1-1.mga9.noarch.rpm thunderbird-be-140.7.1-1.mga9.noarch.rpm thunderbird-bg-140.7.1-1.mga9.noarch.rpm thunderbird-br-140.7.1-1.mga9.noarch.rpm thunderbird-ca-140.7.1-1.mga9.noarch.rpm thunderbird-cs-140.7.1-1.mga9.noarch.rpm thunderbird-cy-140.7.1-1.mga9.noarch.rpm thunderbird-da-140.7.1-1.mga9.noarch.rpm thunderbird-de-140.7.1-1.mga9.noarch.rpm thunderbird-dsb-140.7.1-1.mga9.noarch.rpm thunderbird-el-140.7.1-1.mga9.noarch.rpm thunderbird-en_CA-140.7.1-1.mga9.noarch.rpm thunderbird-en_GB-140.7.1-1.mga9.noarch.rpm thunderbird-en_US-140.7.1-1.mga9.noarch.rpm thunderbird-es_AR-140.7.1-1.mga9.noarch.rpm thunderbird-es_ES-140.7.1-1.mga9.noarch.rpm thunderbird-es_MX-140.7.1-1.mga9.noarch.rpm thunderbird-et-140.7.1-1.mga9.noarch.rpm thunderbird-eu-140.7.1-1.mga9.noarch.rpm thunderbird-fi-140.7.1-1.mga9.noarch.rpm thunderbird-fr-140.7.1-1.mga9.noarch.rpm thunderbird-fy_NL-140.7.1-1.mga9.noarch.rpm thunderbird-ga_IE-140.7.1-1.mga9.noarch.rpm thunderbird-gd-140.7.1-1.mga9.noarch.rpm thunderbird-gl-140.7.1-1.mga9.noarch.rpm thunderbird-he-140.7.1-1.mga9.noarch.rpm thunderbird-hr-140.7.1-1.mga9.noarch.rpm thunderbird-hsb-140.7.1-1.mga9.noarch.rpm thunderbird-hu-140.7.1-1.mga9.noarch.rpm thunderbird-hy_AM-140.7.1-1.mga9.noarch.rpm thunderbird-id-140.7.1-1.mga9.noarch.rpm thunderbird-is-140.7.1-1.mga9.noarch.rpm thunderbird-it-140.7.1-1.mga9.noarch.rpm thunderbird-ja-140.7.1-1.mga9.noarch.rpm thunderbird-ka-140.7.1-1.mga9.noarch.rpm thunderbird-kab-140.7.1-1.mga9.noarch.rpm thunderbird-kk-140.7.1-1.mga9.noarch.rpm thunderbird-ko-140.7.1-1.mga9.noarch.rpm thunderbird-lt-140.7.1-1.mga9.noarch.rpm thunderbird-lv-140.7.1-1.mga9.noarch.rpm thunderbird-ms-140.7.1-1.mga9.noarch.rpm thunderbird-nb_NO-140.7.1-1.mga9.noarch.rpm thunderbird-nl-140.7.1-1.mga9.noarch.rpm thunderbird-nn_NO-140.7.1-1.mga9.noarch.rpm thunderbird-pa_IN-140.7.1-1.mga9.noarch.rpm thunderbird-pl-140.7.1-1.mga9.noarch.rpm thunderbird-pt_BR-140.7.1-1.mga9.noarch.rpm thunderbird-pt_PT-140.7.1-1.mga9.noarch.rpm thunderbird-ro-140.7.1-1.mga9.noarch.rpm thunderbird-ru-140.7.1-1.mga9.noarch.rpm thunderbird-sk-140.7.1-1.mga9.noarch.rpm thunderbird-sl-140.7.1-1.mga9.noarch.rpm thunderbird-sq-140.7.1-1.mga9.noarch.rpm thunderbird-sr-140.7.1-1.mga9.noarch.rpm thunderbird-sv_SE-140.7.1-1.mga9.noarch.rpm thunderbird-th-140.7.1-1.mga9.noarch.rpm thunderbird-tr-140.7.1-1.mga9.noarch.rpm thunderbird-uk-140.7.1-1.mga9.noarch.rpm thunderbird-uz-140.7.1-1.mga9.noarch.rpm thunderbird-vi-140.7.1-1.mga9.noarch.rpm thunderbird-zh_CN-140.7.1-1.mga9.noarch.rpm thunderbird-zh_TW-140.7.1-1.mga9.noarch.rpm SRPMS: thunderbird-140.7.1-1.mga9 thunderbird-l10n-140.7.1-1.mga9 Nicolas, please provide Advisory
Version: Cauldron => 9Status: NEW => ASSIGNEDAssignee: nicolas.salguero => qa-bugsWhiteboard: MGA9TOO => (none)
Suggested advisory: ======================== The updated packages fix a security vulnerability: CSS-based exfiltration of the content from partially encrypted emails when allowing remote content. (CVE-2026-0818) References: https://www.thunderbird.net/en-US/thunderbird/140.7.1esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2026-08/
Flags: affects_mga9+ => (none)
MGA9-64 server Plasma Wayland on Compaq H000SB. No installation issues. Overwrote the previous version thus retaining its configuration. Send aand receive email without and with attachment, all OK Contact to and display of Google calender also OK.
CC: (none) => herman.viaene
Keywords: (none) => advisory
OK x86_64, Plasma, on my workstation svarten Plasma X11, Swedish locale Intel Core i7 870, GPU: AMD Navi 24 Radeon RX 6400 $ thunderbird --version Mozilla Thunderbird 140.7.1esr __Repeated tests like I use to perform: Closed Thunderbird, data backup, updated, started: Thunderbird just keep working OK: Swedish locale Settings and local mail kept IMAP (offline, IMAP to synk to server) SMTP Sent and received mail with inline png and attached pdf Viewed attached pdf in Thunderbird, and printed to network printer. I do not use calendar nor tasks or filters. System and machine details in Bug 34987 comment 7 Also in similar usage by my wife on an Acer Aspire7, Plasma 64 bit.
CC: (none) => fri
Updated in Slimbook ProX15 and Slimboo ProX14 Works fine for now. Send and receive ok. Contacts sync ok. Calendar ok. Task ok. Signature ok. Imap and POP3 ok. Spanish ok. Greetings!
CC: (none) => Joselp
MGA9-64 Plasma on two machines. Updated US English version with no issues. Sent and received POP3 email and checked newsgroups with no issues. I do not use the calendar. Looks good here.
CC: (none) => andrewsfarm
Nobody having any issues, sending this on. Validating.
Keywords: (none) => validated_updateWhiteboard: (none) => MGA9-64-OKCC: (none) => sysadmin-bugs
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2026-0036.html
Status: ASSIGNED => RESOLVEDResolution: (none) => FIXED