Mozilla Patches Critical Bug in Thunderbird (threatpost.com)
Mozilla has issued a critical security update to its popular open-source Thunderbird email client. From a report The patch was part of a December release of five fixes that included two bugs rated high and one rated moderate and another low. Mozilla said Thunderbird, which is also serves as a news, RSS and chat client, the latest Thunderbird 52.5.2 version released last week fixes the vulnerabilities. The most serious of the fixes is a critical buffer overflow bug (CVE-2017-7845) impacting Thunderbird running on Windows operating system. The bug is present when "drawing and validating elements with angle library using Direct 3D 9," according to the Mozilla Foundation Security Advisory. US-Cert said it encourages users and administrators to review the patch and apply the necessary update.
Not even Kevin!
See any of the past Mozilla articles on Slashdot for details.
I ask because in my [limited] professional life, I know of exactly zero entities using this software.
Am I missing out on anything? Can someone more knowledgeable advise me of why I should use Thunderbird over Outlook or GMail?
The patch was part of a December release of five fixes that included two bugs rated high and one rated moderate and another low
2 + 1 + 1 = 5!
How about fixing right-click mouse gestures on Linux? You chucklefucks.
I use it at work, on my laptop. On the home computer, I just use the web browser version of email.
I ask because in my [limited] professional life, I know of exactly zero entities using this software.
Only ones that would are small companies. Thunderbird is a reasonable client but it pretty much ignored the server side and calendaring features that make Outlook and other applications popular. This was pointed out to them ages ago and they never bothered to put in the resources to make it an Outlook fighter.
Am I missing out on anything? Can someone more knowledgeable advise me of why I should use Thunderbird over Outlook or GMail?
Outlook is easy because it isn't of much use if you aren't running Windows. Thunderbird is available for Windows, Mac, and Linux. If you want something consistent between operating systems Outlook won't be your weapon of choice.
As for Gmail, you can use Thunderbird with Gmail if you need/want a desktop client. That's more a matter of preference than utility.
Comment removed based on user account deletion
I still use it. I was initially disappointed that Mozilla wasn't doing anything with Thunderbird. However, at least that meant a stop to ruining it like they did with Firefox. If they had kept going, by now Thunderbird would probably be a webmail app that looks like it is running in Chrome.
Why on earth does an email client need Direct3D?
When Thunderbird was fresh and new I moved to it because it had an interface I really liked, it stored messages in mbox files I could access with any text editor if needed and it provided config capabilities and some add-ons that let me tailor it to my preferred way of working with email.
Sadly, a while back they started destroying the interface I preferred and making changes to the software that made configuring it and getting the add-ons I like to run a real problem. Thankfully there were alternatives to pick from and I did.
I switched to FossaMail years ago and have never looked back. Unfortunately, FossaMail is no longer supported, so no security updates (but also no chance to muck it up either).
The lack of updates doesn't hurt me as bad as some since I only view messages as plain text by default (short circuiting one of the paths for crap to invade a system) and I'm damned careful about what attachments I'll open. I won't click on links without knowing where they lead, which improves my security quite a bit over the average user. I should be able to safely use FossaMail for some time to come.
I certainly hope that there will still be VIABLE alternatives when the time comes to search for a new client. First, and foremost, on my list is storing the messages in text files. Also, an interface I prefer to use, not what some Outlook or Google fan boy thinks I should be using.
I sure as hell ain't gonna use that piece of crap called Outlook. So much is wrong with that software that I'd rather revert to a command line and use Pine or Mutt for a client than even think about using Outlook.
--
Steve (AC because I haven't bothered to register in all these years)
Which is a big reason why Firefox failed for the last several years. They are more interested in pushing a political agenda than building great FOSS.
They were talking about forming a membership program to support them. I have used Firefox for over ten years and I would never pay this circus a penny.
Mozilla said Thunderbird, which is also serves as a news, RSS and chat client, the latest Thunderbird 52.5.2 version released last week fixes the vulnerabilities.
Editors, please at least read what you allow to be posted.
systemd is Roko's Basilisk.
well since we are talking about Mozilla updates. It's a patch + some other hip advertising campaign.
Fuck them!
I run Thunderbird for my personal e-mail because the alternative options aren't pretty and I can do View Source on any e-mail and get full original e-mail headers with the original message body. I am also able to completely turn off HTML e-mail, which is the primary source of malware. HTML e-mail should be completely banned worldwide as broken technology. I have to run Outlook at work, which is far more dangerous than any other piece of software you could run, including malware.
The most annoying thing about Thunderbird is that it frequently lets me know that it has "downloaded 4294967295 messages" and has been a known bug since forever. It's embarrassing when you consider that any developer could easily design a better e-mail retrieval script *without* that bug.
Alpine
I've been using this since it was pine. I can fetch several accounts to my local inbox, and if I need to check it remotely it's an SSH away.
Simple and fast will never go out of style for me. You can keep your webmail and bulky email clients.
My beliefs do not require that you agree with them.
XUL and related stuff came along and I completely ignored it and hoped that it would go away. I pined for a simpler time when you wrote your programs, plugins, extensions and add-ons in a normal programming language.
XUL has gone away.
So I saved a whole bunch of effort. Yay.
I should use this sig to advertise my book ISBN-13 : 978-1501515132.
I used it when it still was Pine. I do need an email client for people like my mom...
Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
Jody, thanks for the information.
Only the 5th sentence is not completely serious:
You think logically. You gather details. You see the big picture. You communicate clearly. I suggest that, in 2020, you run for President of the United States.
If your mom is anything like my mom.... good luck! Unfortunately, I have no solution for you there. :|
My brother convinced my parents to get a Mac, because you know...it just works and is easy to use.
problem1: he has very little understanding of computers, but thinks he's a genius
problem2: my parents have less understanding, and do all of about 3 things on their computer. Yet they still have all kinds of issues because they don't understand the basics... "Firefox, foxfire - whatever... I just need to check my Facebook and email." They use Thunderbird, but call it Firefox email.
I was there a month ago, and I noticed that there were LOTS of pending updates. I asked mom about them, and she said "yeah, that always pops up... I don't know what it is, I just close it"
To be fair, they are in their 70s and just can't keep up with the advances of technology.
My beliefs do not require that you agree with them.
Thunderbird works fine for my mom.
Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
To be fair,they use Linux.. So, the updates are managed by the package manager. I told them to click to install them every time it asks. Should I see they cease to do that, I’m configure totally automatic updates. I can always get on their machines using ssh, any way.
Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
It's okay if you don't want to be a leader in government. We need smart people like you to be leaders in every area of life.
Now there are many situations in which someone who doesn't think carefully gets a lot of money to be elected from an organization that wants favors that are bad for most citizens and destructive to the organization of the country in general.
It takes years for someone to teach herself how the government works, on any level. So, maybe 3 years until you teach yourself enough to be a candidate for the House of Representatives? -- (Smiles)
(This comment is motivated by your unusually insightful comment about email software.)