Nixpkgs security tracker

Untriaged

Permalink CVE-2026-3889

created 2 months ago Activity log

Created suggestion 2 months ago

Spoofing issue in Thunderbird

Spoofing issue in Thunderbird. This vulnerability affects Thunderbird < 149 and Thunderbird < 140.9.

References

Affected products

Thunderbird

<140.9
<149

Matching in nixpkgs

pkgs.pkgsRocm.thunderbird

Full-featured e-mail client

nixos-unstable 148.0.1
- nixpkgs-unstable 148.0.1
- nixos-unstable-small 148.0.1
nixos-25.11 148.0.1
- nixos-25.11-small 148.0.1
- nixpkgs-25.11-darwin 148.0.1

pkgs.thunderbird-unwrapped

Full-featured e-mail client

nixos-unstable 148.0.1
- nixpkgs-unstable 148.0.1
- nixos-unstable-small 148.0.1
nixos-25.11 148.0.1
- nixos-25.11-small 148.0.1
- nixpkgs-25.11-darwin 148.0.1

pkgs.thunderbird-128-unwrapped

Full-featured e-mail client

pkgs.thunderbird-140-unwrapped

Full-featured e-mail client

nixos-unstable 140.7.2esr
- nixpkgs-unstable 140.7.2esr
- nixos-unstable-small 140.7.2esr
nixos-25.11 140.7.2esr
- nixos-25.11-small 140.7.2esr
- nixpkgs-25.11-darwin 140.7.2esr

pkgs.thunderbird-esr-unwrapped

Full-featured e-mail client

nixos-unstable 140.7.2esr
- nixpkgs-unstable 140.7.2esr
- nixos-unstable-small 140.7.2esr
nixos-25.11 140.7.2esr
- nixos-25.11-small 140.7.2esr
- nixpkgs-25.11-darwin 140.7.2esr

pkgs.pkgsRocm.thunderbird-latest

Full-featured e-mail client

nixos-unstable 148.0.1
- nixpkgs-unstable 148.0.1
- nixos-unstable-small 148.0.1
nixos-25.11 148.0.1
- nixos-25.11-small 148.0.1
- nixpkgs-25.11-darwin 148.0.1

pkgs.thunderbird-latest-unwrapped

Full-featured e-mail client

nixos-unstable 148.0.1
- nixpkgs-unstable 148.0.1
- nixos-unstable-small 148.0.1
nixos-25.11 148.0.1
- nixos-25.11-small 148.0.1
- nixpkgs-25.11-darwin 148.0.1

pkgs.pkgsRocm.thunderbird-unwrapped

Full-featured e-mail client

nixos-unstable 148.0.1
- nixpkgs-unstable 148.0.1
- nixos-unstable-small 148.0.1
nixos-25.11 148.0.1
- nixos-25.11-small 148.0.1
- nixpkgs-25.11-darwin 148.0.1

pkgs.thunderbirdPackages.thunderbird

Full-featured e-mail client

nixos-unstable 148.0.1
- nixpkgs-unstable 148.0.1
- nixos-unstable-small 148.0.1
nixos-25.11 148.0.1
- nixos-25.11-small 148.0.1
- nixpkgs-25.11-darwin 148.0.1

pkgs.roundcubePlugins.thunderbird_labels

None

nixos-unstable 1.6.0
- nixpkgs-unstable 1.6.0
- nixos-unstable-small 1.6.0
nixos-25.11 1.6.0
- nixos-25.11-small 1.6.0
- nixpkgs-25.11-darwin 1.6.0

pkgs.thunderbirdPackages.thunderbird-128

Full-featured e-mail client

pkgs.thunderbirdPackages.thunderbird-140

Full-featured e-mail client

nixos-unstable 140.7.2esr
- nixpkgs-unstable 140.7.2esr
- nixos-unstable-small 140.7.2esr
nixos-25.11 140.7.2esr
- nixos-25.11-small 140.7.2esr
- nixpkgs-25.11-darwin 140.7.2esr

pkgs.thunderbirdPackages.thunderbird-esr

Full-featured e-mail client

nixos-unstable 140.7.2esr
- nixpkgs-unstable 140.7.2esr
- nixos-unstable-small 140.7.2esr
nixos-25.11 140.7.2esr
- nixos-25.11-small 140.7.2esr
- nixpkgs-25.11-darwin 140.7.2esr

pkgs.pkgsRocm.thunderbird-latest-unwrapped

Full-featured e-mail client

nixos-unstable 148.0.1
- nixpkgs-unstable 148.0.1
- nixos-unstable-small 148.0.1
nixos-25.11 148.0.1
- nixos-25.11-small 148.0.1
- nixpkgs-25.11-darwin 148.0.1

pkgs.thunderbirdPackages.thunderbird-latest

Full-featured e-mail client

nixos-unstable 148.0.1
- nixpkgs-unstable 148.0.1
- nixos-unstable-small 148.0.1
nixos-25.11 148.0.1
- nixos-25.11-small 148.0.1
- nixpkgs-25.11-darwin 148.0.1

pkgs.pkgsRocm.thunderbirdPackages.thunderbird

Full-featured e-mail client

nixos-unstable 148.0.1
- nixpkgs-unstable 148.0.1
- nixos-unstable-small 148.0.1
nixos-25.11 148.0.1
- nixos-25.11-small 148.0.1
- nixpkgs-25.11-darwin 148.0.1

pkgs.pkgsRocm.thunderbirdPackages.thunderbird-latest

Full-featured e-mail client

nixos-unstable 148.0.1
- nixpkgs-unstable 148.0.1
- nixos-unstable-small 148.0.1
nixos-25.11 148.0.1
- nixos-25.11-small 148.0.1
- nixpkgs-25.11-darwin 148.0.1

Package maintainers

@lovesegfault Bernardo Meurer <meurerbernardo@gmail.com>
@vcunat Vladimír Čunát <v@cunat.cz>
@nbp Nicolas B. Pierron <nixos@nbp.name>
@booxter Ihar Hrachyshka <ihar.hrachyshka@gmail.com>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.pkgsRocm.thunderbird

pkgs.thunderbird-unwrapped

pkgs.thunderbird-128-unwrapped

pkgs.thunderbird-140-unwrapped

pkgs.thunderbird-esr-unwrapped

pkgs.pkgsRocm.thunderbird-latest

pkgs.thunderbird-latest-unwrapped

pkgs.pkgsRocm.thunderbird-unwrapped

pkgs.thunderbirdPackages.thunderbird

pkgs.roundcubePlugins.thunderbird_labels

pkgs.thunderbirdPackages.thunderbird-128

pkgs.thunderbirdPackages.thunderbird-140

pkgs.thunderbirdPackages.thunderbird-esr

pkgs.pkgsRocm.thunderbird-latest-unwrapped

pkgs.thunderbirdPackages.thunderbird-latest

pkgs.pkgsRocm.thunderbirdPackages.thunderbird

pkgs.pkgsRocm.thunderbirdPackages.thunderbird-latest

Package maintainers