CLSA-2026:1783970136

[CLSA-2026:1783970136] thunderbird: Fix of 10 CVEs

Type:

security

Severity:

Critical

Release date:

2026-07-13 19:16:05 UTC

Description:

- CVE-2024-7519: fix out-of-bounds write in graphics ShmemSection handling (Mozilla bug 1902307)
- CVE-2025-14324: fix constant-pool assembler-buffer size miscalculation on ARM (Mozilla bug 1996840)
- CVE-2026-2806: fix SVG glyph out-of-bounds read via decompression size mismatch (Mozilla bug 2006199)

CVEs fixed:

CVE-2024-7519
CVE-2025-14324
CVE-2026-2757
CVE-2026-2758
CVE-2026-2760
CVE-2026-2761
CVE-2026-2771
CVE-2026-2775
CVE-2026-2793
CVE-2026-2806

Updated packages:

thunderbird-115.4.1-1.el9_2.alma.tuxcare.els23.x86_64.rpm
sha:43b5e8064497c36a69768a3e7948a832b342ec893b04518a61c3fc214cdecbbd

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.