Update to 128.11.0 https://www.thunderbird.net/en-US/thunderbird/128.11.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/
Comment
Fix for local information disclosure in systemd-coredump (CVE-2025-4598) Fixes for systemd itself, run0, systemd-networkd, “secure” pager, man pages, shell completions, sd-boot, sd-varlink Hardware database update
New upstream version (139.0)
This update contains the backported fix for CVE-2024-52804 (cookie parsing DoS vuln).
Update to 2025.88 (rhbz#2364904)