Thunderbird 68.4.1 is a security update

Martin Brinkmann
Jan 13, 2020
Updated • Jan 13, 2020
Email, Thunderbird
|
25

Thunderbird 68.4.1 was released a couple of days ago. The new version is a security update for the email client that patches a security vulnerability that is exploited in the wild as well as other security issues in the program.

Thunderbird users who are running a 68.x version of the email client should receive the update automatically provided that automatic updating has not been turned off in the client. A manual check for updates via Help > About Thunderbird in the client should pick up the new update right away so that it can be installed.

As far as security is concerned, Thunderbird 68.4.1 fixes a total of seven different security vulnerabilities; one of them rated critical, the highest severity rating, others high or moderate, the second and third highest severity rating available.

  1. CVE-2019-17026: IonMonkey type confusion with StoreElementHole and FallibleStoreElement
  2. CVE-2019-17015: Memory corruption in parent process during new content process initialization on Windows
  3. CVE-2019-17016: Bypass of @namespace CSS sanitization during pasting
  4. CVE-2019-17017: Type Confusion in XPCVariant.cpp
  5. CVE-2019-17021: Heap address disclosure in parent process during content process initialization on Windows
  6. CVE-2019-17022: CSS sanitization does not escape HTML tags
  7. CVE-2019-17024: Memory safety bugs fixed in Thunderbird 68.4.1

The critical security vulnerability is the same that Mozilla patched earlier this month in Firefox. Since Thunderbird relies on Firefox code, it is often affected by issues that affect the web browser.

Thunderbird 68.4.1 comes with improvements in regards to setting up Microsoft Exchange servers. The development team lists better support for IMAP/SMTP, better detection of Office 365 accounts, and re-run configuration after password change.

The new version of the email client fixes five issues that were detected in previous versions of the application:

  • Fixed an issue that prevented attachments with at least one space in the name to be opened under certain circumstances.
  • Fixed an issue that showed garbled content in the message display pane after changing view layouts under certain circumstances.
  • Fixed an issue that caused tags to be lost in shared IMAP folders under certain circumstances.
  • Theme changes to "achieve 'pixel perfection'".
  • Fixed the event attendee dialog in calendar.

Thunderbird users who run Thunderbird 68.x and have not updated yet to the new version are encouraged to do so right away to protect the client from attacks.

Now You: Which email client do you use currently and why?

Summary
Thunderbird 68.4.1 is a security update
Article Name
Thunderbird 68.4.1 is a security update
Description
Thunderbird 68.4.1 was released a couple of days ago. The new version is a security update for the email client that patches a critical security vulnerability.
Author
Publisher
Ghacks Technology News
Logo
Advertisement

Tutorials & Tips


Previous Post: «
Next Post: «

Comments

  1. JMGG said on January 19, 2012 at 8:25 am
    Reply

    You said that Outlook isn’t your main email client, so which is your main one?

    1. BalaC said on January 19, 2012 at 9:42 am
      Reply

      I think its thunderbird

    2. Martin Brinkmann said on January 19, 2012 at 10:15 am
      Reply

      It is Mozilla Thunderbird.

  2. Salaam said on September 24, 2012 at 9:52 pm
    Reply

    Awesome! This actually solved my problem… what a stupid bug.

  3. Claud said on December 19, 2012 at 2:08 am
    Reply

    If this is the same bug that I’ve encountered, there may be another fix: (1) hover over open Outlook item in Taskbar, cursor up to hover over Outlook window item, and right-click; (2) this should give you Restore / Move / Size / Minimize / Maximize — choose Move or Size; (3) use your cursor keys, going arbitrarily N/S/E/W, to try to move or size the Outlook window back into view. Basically, the app behaves as though it were open in a 0x0 window, or at a location that’s offscreen, and this will frequently work to resize and/or move the window. Don’t forget to close while resized/moved, so that Outlook remembers the size/position for next time.

    1. Lynda said on February 12, 2013 at 3:37 pm
      Reply

      THANK YOU Claude!!! I could get the main window to launch but could not get any other message window to show on the desktop. You are my hero!!!!

    2. Chad said on November 20, 2018 at 4:24 pm
      Reply

      Solved my issue! 6 years later and this is still problem…

    3. Ivan X said on January 21, 2021 at 4:50 pm
      Reply

      Fantastic. Thank you. Size did the trick.

  4. Andrew said on October 26, 2013 at 7:06 am
    Reply

    This solved my Outlook problem, too. Thank you. :)

  5. Charles said on December 7, 2013 at 7:23 pm
    Reply

    Thank you so much, this started happening to me today and was causing big problems. You are a life saver, I hope I can help you in some way some day.

  6. garth said on November 7, 2014 at 7:13 pm
    Reply

    You are a god – thank you!

  7. Faisal said on February 9, 2015 at 10:09 am
    Reply

    thanks a lot…. work like charm.. :-)

  8. Simon said on March 24, 2015 at 11:36 pm
    Reply

    Yah…thanks Claude. I’ve been having the same problem and tried all the suggestions…your solution was the answer. It had resized itself to a 0/0 box. Cheers

  9. Olu said on April 14, 2015 at 1:35 pm
    Reply

    Excellent post. This had me baffled even trying to accurately describe the problem. This fixed it for me.
    Thank you

  10. Coenig said on July 23, 2015 at 7:36 am
    Reply

    Thanks a lot for the article. Don’t know why it happenend, don’t know how it got fixed, but it was really annoying and now it works :-)

  11. Fali said on January 20, 2016 at 4:19 pm
    Reply

    Thanks a lot. I was facing this issue from past 3 week. I tried everything but no resolution. The issue was happening intermittently and mainly when I was changing the display of screen ( as i use 2 monitors). The only option i had was to do system restore. But thanks to you.

    1. MIki said on January 10, 2019 at 11:54 am
      Reply

      I’ve been tried to sole this problem for 12hours. Your comment about changing the display of screen helped me a lot!! Thanks!!

  12. Christina said on January 20, 2016 at 6:14 pm
    Reply

    Thank you…don’t know why this happened but your instructions helped me fix it. Running Windows 10 and office pro 2007

  13. Oz said on July 22, 2016 at 3:20 pm
    Reply

    Great tip! Thanks!

  14. Tracy said on September 1, 2016 at 4:48 pm
    Reply

    Worked for me, too – thank you!!!

  15. shawn said on September 9, 2016 at 10:25 am
    Reply

    It’s Worked for me, too
    thank you very much!

  16. Jari said on October 31, 2016 at 11:53 am
    Reply

    I had a similar issue with Outlook 2013 on Windows 10 and this helped me to fix it. Thank you very much!

  17. Michel H said on November 30, 2016 at 11:08 pm
    Reply

    Thank you so much. Solved!
    Considering you published this in 2012, incredible not been debugged by Microsoft.
    Thank you again. M

  18. Ziad Bitar said on January 9, 2017 at 2:00 am
    Reply

    This problem was faced by only one user logging to TS 2008 r2 using outlook 2010.The issue was resolved.

    Thanks.

  19. Anonymous said on February 15, 2017 at 5:24 pm
    Reply

    Great tip. Thank you!!!! If it helps, I had to use the Control Key and the arrow keys at the same time to bring my window back into view. Worked like a charm.

  20. Rochelle said on March 6, 2017 at 11:59 am
    Reply

    Thank you, this worked !!!!

  21. anom1234 said on May 20, 2018 at 11:20 pm
    Reply

    Man, you are a fucking god. Thanks a lot, what an annoying bug!!

  22. JC said on October 12, 2020 at 2:14 pm
    Reply

    Awesome, this post solved the issue. Many thanks!

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.