Thunderbird 102.6.1 is a security update

Martin Brinkmann
Dec 20, 2022
Updated • Dec 22, 2022
Added information about the fixed security issue in Thunderbird 102.6.1
Email
|
4

Users of the open source email client Thunderbird may want to fire up the update engine of the application to install the latest update for the program. Thunderbird 102.6.1 is a security update that also addresses non-security issues.

thunderbird 102.6.1

The update is already available. Existing Thunderbird users may select Menu > Help > About Thunderbird to run a check for updates. The email client should pick up the update and install it automatically at that point. The new version should be 102.6.1 after the update.

The new Thunderbird 102.6.1 is also available as a standalone download for all supported operating systems and languages. Just load the official download website for the email client to download the right version to the local system. You may run the installer then to upgrade or install Thunderbird as a new program on the device.

ADVERTISEMENT

The official release notes list three non-security changes and confirm that Thunderbird 102.6.1 is a security update. The official Security Advisory website has not been updated yet with information on the release; this means, that the number and severity of vulnerabilities fixed in the new version is unknown at this point. We will update the article once the information is published by the Thunderbird team.

Cautious users and admins may want to wait with the installation of the update until the information becomes available.

Update: The Security Advisory website was updated earlier today. Thunderbird 102.6.1 fixes a single security issue that has an impact of moderate. According to the description, it fixes an issue that affected drag and drop operations in the email client:

"A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code."

As far as the non-security fixes are concerned, one addresses an issue with remote content not being loaded in user-defined signatures by the email client. The second issue addresses an issue that affected add-ons that added action buttons to Thunderbird. Updates for these add-ons were not shown by Thunderbird. The only way to update affected extensions was to uninstall them and reinstall them after the removal; this installed the latest version of the add-on in Thunderbird.

Thunderbird 102.6.1 includes stability improvements as well, according to the release notes. The last Thunderbird release, Thunderbird 102.6, resolved several security issues in the email client as well. Thunderbird 102.6.1 may be the last release of the year 2022, unless another security issue or critical bug needs the attention of the team.

Now You: which Thunderbird version do you run, if any?

Summary
Thunderbird 102.6.1 is a security update
Article Name
Thunderbird 102.6.1 is a security update
Description
Thunderbird 102.6.1, a new version of the open source email client, is a security update that also addresses non-security issues.
Author
Publisher
Ghacks Technology News
Logo
Advertisement

Previous Post: «
Next Post: «

Comments

  1. Paul(us) said on December 21, 2022 at 12:07 am
    Reply

    Thanks Martin.

  2. freed said on December 21, 2022 at 7:16 am
    Reply

    Re the line: “Existing Thunderbird users may select Menu > Help > About Thunderbird to run a check for updates. The email client should pick up the update and install it automatically at that point.”

    This is automatic only if you have Tbird config’d (under Settings – General – Updates) to automatically install updates.

    If you have it config’d there to “Check for updates, but let me choose…”, then Menu > Help > About will give you the option of installing the update, but you’ll have to click the button shown to make it happen. Not automatic.

    1. Martin Brinkmann said on December 21, 2022 at 11:45 am
      Reply

      Fair point. The first is the default though, right?

  3. Paul(us) said on December 21, 2022 at 12:54 pm
    Reply

    Another thought Martin.
    what is your opinion about Betterbird ( Latest release) 102.6.1-bb27 ?
    Would you be so kind to take a look at it and maybe even make a comparison article about Betterbird?

    According to Betterbird it is a:
    Betterbird is an enhanced version of Thunderbird with new features and bug fixes not available in Mozilla Thunderbird.

    Betterbird looks and feels like Thunderbird, but it’s easy to spot the new features available. Many of these features have been requested for over a decade, and some have been attempted and failed. Examples include:

    Multi-line view like in Outlook, Lotus Notes, and Postbox
    Customise the header pane buttons
    Complex search terms
    Quick Filter untagged messages
    Permanently decrypt messages
    Global search in encrypted messages
    Quick Filter search in encrypted messages
    Notification of new messages in newsgroups
    Configurable display of addresses in the message list
    And more
    https://www.betterbird.eu/

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.