Red Hat Security Advisory: thunderbird security update
Mozilla Thunderbird, a standalone mail and newsgroup client, has multiple security vulnerabilities including unsolicited file download, disk space exhaustion, and credential leakage via mailbox:/// links (CVE-2025-5986). Red Hat has issued an important security advisory with updates available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. The update addresses these vulnerabilities and is recommended for affected systems.
AI Analysis
Technical Summary
This advisory covers security fixes for Mozilla Thunderbird addressing several vulnerabilities such as unsolicited file download, disk space exhaustion, and credential leakage via mailbox:/// links, identified as CVE-2025-5986. The update is provided by Red Hat for its Enterprise Linux 9.0 Update Services for SAP Solutions across multiple architectures including x86_64, ppc64le, aarch64, and s390x. The advisory also references additional CVEs (CVE-2025-6424, CVE-2025-6425, CVE-2025-6429, CVE-2025-6430) related to Thunderbird. Red Hat rates the update as having an important security impact. No CVSS score is provided in the advisory. The vendor provides updated Thunderbird packages to remediate these issues.
Potential Impact
The vulnerabilities could allow attackers to trigger unsolicited file downloads, exhaust disk space, and leak credentials via specially crafted mailbox:/// links in Thunderbird. These issues can compromise user data confidentiality and system stability. The advisory does not report known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated Thunderbird packages for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions that address these vulnerabilities. Users should apply these official updates as detailed in the Red Hat advisory (RHSA-2025:10161) and the referenced update article (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: thunderbird security update
Description
Mozilla Thunderbird, a standalone mail and newsgroup client, has multiple security vulnerabilities including unsolicited file download, disk space exhaustion, and credential leakage via mailbox:/// links (CVE-2025-5986). Red Hat has issued an important security advisory with updates available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. The update addresses these vulnerabilities and is recommended for affected systems.
Affected software
pkg:rpm/redhat/thunderbirdRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers security fixes for Mozilla Thunderbird addressing several vulnerabilities such as unsolicited file download, disk space exhaustion, and credential leakage via mailbox:/// links, identified as CVE-2025-5986. The update is provided by Red Hat for its Enterprise Linux 9.0 Update Services for SAP Solutions across multiple architectures including x86_64, ppc64le, aarch64, and s390x. The advisory also references additional CVEs (CVE-2025-6424, CVE-2025-6425, CVE-2025-6429, CVE-2025-6430) related to Thunderbird. Red Hat rates the update as having an important security impact. No CVSS score is provided in the advisory. The vendor provides updated Thunderbird packages to remediate these issues.
Potential Impact
The vulnerabilities could allow attackers to trigger unsolicited file downloads, exhaust disk space, and leak credentials via specially crafted mailbox:/// links in Thunderbird. These issues can compromise user data confidentiality and system stability. The advisory does not report known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated Thunderbird packages for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions that address these vulnerabilities. Users should apply these official updates as detailed in the Red Hat advisory (RHSA-2025:10161) and the referenced update article (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:10161
- Cve Count
- 5
- Additional Cves
- ["CVE-2025-6424","CVE-2025-6425","CVE-2025-6429","CVE-2025-6430"]
Threat ID: 6a419cba27e9c79719abeb1a
Added to database: 06/28/2026, 22:14:18 UTC
Last enriched: 06/28/2026, 22:35:29 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 47
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.