This is a maintenance release of Thunderbird 31

Apr 1, 2015 23:18 GMT  ·  By

Immediately after releasing the final version of the Mozilla Firefox 37.0 web browser, which brings native HTML5 playback on YouTube, Mozilla has also released a new maintenance version of its acclaimed Mozilla Thunderbird email, news, and chat software.

Mozilla Thunderbird 31.6.0 is a point release, a milestone that only fixes some bugs that have been reported by users since the previous stable release of the application, Mozilla Thunderbird 31.5.0, which means that all users are urged to update to the new version as soon as possible.

According to the release notes, Mozilla Thunderbird 31.6.0 fixes a use-after-free issue that occurred when using the Fluendo MP3 GStreamer plugin to play certain MP3 files, addresses an issue with loading of documents through the resource:// URL, which loaded privileged chrome pages.

A flaw in the CORS (Cross-Origin Resource Sharing) request has been repaired in order to no longer follow 30x redirections after preflight has been fixed, as well as a flaw with SVG content navigation, which could allow an attacker to bypass same-origin policy protections and run scripts as a privileged user.

Lastly, some miscellaneous memory safety bugs have been identified and fixed in this new milestone of Thunderbird. You can download Mozilla Thunderbird 31.6.0 for Linux, Mac OS X, and Windows right now from Softpedia. Also, Mozilla Thunderbird 38.0 has been pushed to the Beta channel and it is available for download and testing from the aforementioned links.