[CLSA-2026:1782404883] thunderbird: Fix of CVE-2026-12330
Type:
security
Severity:
Moderate
Release date:
2026-06-25 16:28:19 UTC
Description:
- CVE-2026-12330: out-of-bounds write in intl/lwbrk LineBreaker ComputeBreakPositions break-all path when GraphemeClusterBreakIteratorUtf16 yields a position reaching End-Of-Text; add bounds check guarding the aBreakBefore[cur + *pos] write (Bug 2029326)
CVEs fixed:
Updated packages:
  • thunderbird-115.4.1-1.el9_2.alma.tuxcare.els14.x86_64.rpm
    sha:3c2c3d4775716b5466a11351c9c05b595b09f04c9b0c431237b3a682b916342c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.