Thunderbird 102.6.1 is a security update
Users of the open source email client Thunderbird may want to fire up the update engine of the application to install the latest update for the program. Thunderbird 102.6.1 is a security update that also addresses non-security issues.
The update is already available. Existing Thunderbird users may select Menu > Help > About Thunderbird to run a check for updates. The email client should pick up the update and install it automatically at that point. The new version should be 102.6.1 after the update.
The new Thunderbird 102.6.1 is also available as a standalone download for all supported operating systems and languages. Just load the official download website for the email client to download the right version to the local system. You may run the installer then to upgrade or install Thunderbird as a new program on the device.
The official release notes list three non-security changes and confirm that Thunderbird 102.6.1 is a security update. The official Security Advisory website has not been updated yet with information on the release; this means, that the number and severity of vulnerabilities fixed in the new version is unknown at this point. We will update the article once the information is published by the Thunderbird team.
Cautious users and admins may want to wait with the installation of the update until the information becomes available.
Update: The Security Advisory website was updated earlier today. Thunderbird 102.6.1 fixes a single security issue that has an impact of moderate. According to the description, it fixes an issue that affected drag and drop operations in the email client:
"A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code."
As far as the non-security fixes are concerned, one addresses an issue with remote content not being loaded in user-defined signatures by the email client. The second issue addresses an issue that affected add-ons that added action buttons to Thunderbird. Updates for these add-ons were not shown by Thunderbird. The only way to update affected extensions was to uninstall them and reinstall them after the removal; this installed the latest version of the add-on in Thunderbird.
Thunderbird 102.6.1 includes stability improvements as well, according to the release notes. The last Thunderbird release, Thunderbird 102.6, resolved several security issues in the email client as well. Thunderbird 102.6.1 may be the last release of the year 2022, unless another security issue or critical bug needs the attention of the team.
Now You: which Thunderbird version do you run, if any?
Another thought Martin.
what is your opinion about Betterbird ( Latest release) 102.6.1-bb27 ?
Would you be so kind to take a look at it and maybe even make a comparison article about Betterbird?
According to Betterbird it is a:
Betterbird is an enhanced version of Thunderbird with new features and bug fixes not available in Mozilla Thunderbird.
Betterbird looks and feels like Thunderbird, but it’s easy to spot the new features available. Many of these features have been requested for over a decade, and some have been attempted and failed. Examples include:
Multi-line view like in Outlook, Lotus Notes, and Postbox
Customise the header pane buttons
Complex search terms
Quick Filter untagged messages
Permanently decrypt messages
Global search in encrypted messages
Quick Filter search in encrypted messages
Notification of new messages in newsgroups
Configurable display of addresses in the message list
And more
https://www.betterbird.eu/
Re the line: “Existing Thunderbird users may select Menu > Help > About Thunderbird to run a check for updates. The email client should pick up the update and install it automatically at that point.”
This is automatic only if you have Tbird config’d (under Settings – General – Updates) to automatically install updates.
If you have it config’d there to “Check for updates, but let me choose…”, then Menu > Help > About will give you the option of installing the update, but you’ll have to click the button shown to make it happen. Not automatic.
Fair point. The first is the default though, right?
Thanks Martin.