Sandro wrote:
Mozilla's blog entry doesn't substantiate the claim and the linked bug report[1] is not publicly accessible.
The best way then would be to check whether the one-line fix: https://hg.mozilla.org/comm-central/log?rev=1784838 applies (and compiles), and if it does, apply it.
Though it is moot anyway because Fedora has already been upgraded to Thunderbird 102.2.1. But backporting security fixes should have been considered as an option. I get the impression that it was not even considered.
Kevin Kofler