{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "update to 153.0.1 ESR (MFSA 2026-71)\n- drop six patches made obsolete by 153: P02 firefox-gcc-build (fixed upstream),\n P15 build-system-nss + P16 build-tb-system-nss (both patch\n third_party/rust/neqo-crypto, a directory 153 no longer has), P19\n build-min-lexical, P52 exceptionHandled-for-IO-error-processhandler and P111\n av1-else-condition-add (all upstreamed)\n- Source404 nss-3.126.0-1.el9.src.rpm is a locally rebranded Fedora artifact\n (md5 1fc9b7b02f848fc99e06d5a8680ea5a3), rebuilt from Fedora rawhide dist-git\n commit 43cbb021d9886d5abc3d4cb546d022929b9bb1dc (2026-07-29) whose own NVR is\n nss-3.126.0-1; there is no public nss-3.126.0-1.el9, so the .el9 disttag\n reflects the build target, not an upstream vendor NVR. The EL9-vs-Fedora patch\n disposition (Alma c9 carries 29 downstream patches, Fedora 3.126 carries 14) is\n tracked as a follow-up; NSS stays private to thunderbird either way\n- P103 mozilla-bmo1504834-part1 loses its gfx/2d/Types.h hunk: that hunk rewrote an\n `#if MOZ_LITTLE_ENDIAN()/#elif MOZ_BIG_ENDIAN()` block which 153 replaced with\n `A8R8G8B8_UINT32 = std::endian::native == std::endian::little ? B8G8R8A8 : A8R8G8B8`,\n so it had nothing left to apply; on little-endian that ternary yields B8G8R8A8,\n which is what the hunk forced. The surviving DrawTargetSkia.cpp\n `kARGBAlphaOffset = 0` is a pre-existing Fedora-inherited override that does NOT\n match the upstream little-endian value there (that ternary yields 3), but it sits\n inside `#ifdef DEBUG` (gfx/2d/DrawTargetSkia.cpp:154-257) alongside\n VerifyRGBXFormat/VerifyRGBXCorners, so it is compiled out of release builds\n entirely and has no release impact on any arch\n- update bundled cbindgen to 0.29.4; Gecko 153 requires >= 0.29.4 and the\n previous bundle provided 0.27.0\n- update bundled NSS to 3.126.0 (with NSPR 4.39); Gecko 153 requires nss >= 3.125\n and no RHEL/AlmaLinux stream ships one (9.8 still has 3.112). Rebased on the\n Fedora nss packaging, which tracks 3.126 with a patch set that applies cleanly;\n the RHEL 3.112 patch set does not survive the jump. NSS stays private to\n thunderbird under /usr/lib64/thunderbird/bundled as before -- the platform NSS is\n untouched. Note Source403 (EL8 path) still carries 3.112.\n- fix the unsorted openssl-backend SOURCES list in comm/third_party/rnp/moz.build;\n mozbuild requires SOURCES to be appended in sorted order and upstream only\n exercises the botan backend, so the bug is invisible to them\n- CVE-2026-16364: Incorrect boundary conditions in the Audio/Video: Playback\n component\n- CVE-2026-16365: Privilege escalation in the DOM: Workers component\n- CVE-2026-16366: Privilege escalation in the DOM: Navigation component\n- CVE-2026-16367: Sandbox escape due to invalid pointer in the Disability\n Access APIs component\n- CVE-2026-16370: Mitigation bypass in the DOM: Networking component\n- CVE-2026-16372: Privilege escalation in the DOM: Content Processes component\n- CVE-2026-16376: Denial-of-service in the Graphics: WebGPU component\n- CVE-2026-16378: Other issue in the DOM: Copy & Paste and Drag & Drop\n component\n- CVE-2026-16380: Mitigation bypass in the Networking component\n- CVE-2026-16382: Mitigation bypass in the DOM: Service Workers component\n- CVE-2026-16384: Information disclosure due to uninitialized memory in the\n Graphics: WebGPU component\n- CVE-2026-16385: Information disclosure due to uninitialized memory in the\n Graphics: WebGPU component\n- CVE-2026-16386: Information disclosure due to uninitialized memory in the\n Graphics: WebGPU component\n- CVE-2026-16388: Sandbox escape in the DOM: Networking component\n- CVE-2026-16389: Incorrect boundary conditions, integer overflow in the\n Libraries component in NSS\n- CVE-2026-16392: JIT miscompilation in the JavaScript Engine: JIT component\n- CVE-2026-16393: Incorrect boundary conditions in the Graphics: WebGPU\n component\n- CVE-2026-16394: Mitigation bypass in the DOM: Security component\n- CVE-2026-16395: Integer overflow in the Audio/Video component\n- CVE-2026-16398: Site isolation issue in the Graphics component\n- CVE-2026-16399: Site isolation issue in the DOM: Navigation component\n- CVE-2026-16400: Information disclosure in the DOM: Security component\n- CVE-2026-16401: Privilege escalation in the Data Loss Prevention component\n- CVE-2026-16402: Integer overflow in the Graphics: ImageLib component\n- CVE-2026-16403: Spoofing issue in the Address Bar component\n- CVE-2026-16406: Mitigation bypass in the Networking component\n- CVE-2026-16407: Mitigation bypass in the DOM: Service Workers component\n- CVE-2026-16408: Integer overflow in the Audio/Video: Playback component\n- CVE-2026-16409: Invalid pointer in the Security: PSM component\n- CVE-2026-16410: JIT miscompilation in the JavaScript Engine: JIT component\n- CVE-2026-16411: Memory safety bugs fixed in Thunderbird 153", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2026/clsa-2026_1787115646.json" } ], "tracking": { "current_release_date": "2026-08-20T10:23:09Z", "generator": { "date": "2026-08-20T10:23:09Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1787115646", "initial_release_date": "2026-08-19T05:00:49Z", "revision_history": [ { "date": "2026-08-19T05:00:49Z", "number": "1", "summary": "Initial version" }, { "date": "2026-08-19T07:10:44Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-08-20T10:23:09Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "thunderbird: Fix of 22 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64", "product": { "name": "thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_id": "thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@153.0.1-1.el9_2.alma.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product": { "name": "thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_id": "thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@140.13.0-1.el9_2.alma.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product": { "name": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_id": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@140.12.0-1.el9_2.alma.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els27?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els25?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els24?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els23?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els19?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els17?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els18?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els16?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els15?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els14?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els13?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els11?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els7?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els10?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els9?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" }, "product_reference": "thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" }, "product_reference": "thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64" }, "product_reference": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-16376", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16376" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2035733", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2035733" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-4082", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges.\n*This bug only affects Thunderbird for macOS. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-4082" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1937097", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1937097" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-28/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-28/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-29/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-29/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-30/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-30/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-31/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-31/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-32/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-32/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00022.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00022.html" } ], "release_date": "2025-04-29T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2025-04-29T14:15:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-16402", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16402" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2052703", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2052703" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-6758", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-6758" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2013619", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2013619" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-30/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-30/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-33/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-33/" } ], "release_date": "2026-04-21T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-04-21T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16378", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16378" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2038868", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2038868" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16389", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16389" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2043887", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2043887" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2026/08/msg00019.html", "url": "https://lists.debian.org/debian-lts-announce/2026/08/msg00019.html" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16399", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16399" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2049981", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2049981" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-12326", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152 and Thunderbird 152.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12326" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1767455%2C2004308%2C2024445%2C2028182%2C2029765%2C2029883%2C2030110%2C2030149%2C2030366%2C2030374%2C2030564%2C2031120%2C2033411%2C2038695%2C2042465%2C2042781%2C2042907", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1767455%2C2004308%2C2024445%2C2028182%2C2029765%2C2029883%2C2030110%2C2030149%2C2030366%2C2030374%2C2030564%2C2031120%2C2033411%2C2038695%2C2042465%2C2042781%2C2042907" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2021955%2C2025960%2C2029066%2C2029403%2C2029435%2C2029803%2C2030570%2C2030573%2C2032264%2C2033234%2C2034816%2C2035907%2C2035963%2C2036895%2C2036898%2C2036907%2C2036909%2C2036928%2C2036931%2C2036932%2C2036934%2C2039238%2C2039463", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2021955%2C2025960%2C2029066%2C2029403%2C2029435%2C2029803%2C2030570%2C2030573%2C2032264%2C2033234%2C2034816%2C2035907%2C2035963%2C2036895%2C2036898%2C2036907%2C2036909%2C2036928%2C2036931%2C2036932%2C2036934%2C2039238%2C2039463" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2039050%2C2042718%2C2042760%2C2044831%2C2045307%2C2045398%2C2045516%2C2045572%2C2041741%2C2044433", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2039050%2C2042718%2C2042760%2C2044831%2C2045307%2C2045398%2C2045516%2C2045572%2C2041741%2C2044433" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-57/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-60/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-12326", "url": "https://access.redhat.com/security/cve/CVE-2026-12326" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2489222", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489222" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12326.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12326.json" } ], "release_date": "2026-06-16T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-06-16T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-8044", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Memory safety bugs present in Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 141 and Thunderbird 141.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8044" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1933572%2C1971116", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1933572%2C1971116" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/" } ], "release_date": "2025-07-22T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2025-07-22T21:15:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16409", "cwe": { "id": "CWE-824", "name": "Access of Uninitialized Pointer" }, "notes": [ { "category": "description", "text": "Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16409" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2052134", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2052134" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16388", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "description", "text": "Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16388" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2043845", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2043845" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-2798", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2798" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014136", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014136" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-2798", "url": "https://access.redhat.com/security/cve/CVE-2026-2798" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2442315", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442315" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2798.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2798.json" } ], "release_date": "2026-02-24T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-02-24T14:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-0881", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0881" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2005845", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2005845" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-01/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-04/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-0881", "url": "https://access.redhat.com/security/cve/CVE-2026-0881" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2428970", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428970" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0881.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0881.json" } ], "release_date": "2026-01-13T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-01-13T14:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-16380", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16380" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2040386", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2040386" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-2802", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2802" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2011069", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2011069" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/" } ], "release_date": "2026-02-24T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-02-24T14:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-4089", "cwe": { "id": "CWE-77", "name": "Improper Neutralization of Special Elements used in a Command ('Command Injection')" }, "notes": [ { "category": "description", "text": "Due to insufficient escaping of special characters in the \"copy as cURL\" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-4089" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-28/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-28/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-31/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-31/" } ], "release_date": "2025-04-29T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2025-04-29T14:15:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-4728", "cwe": { "id": "CWE-290", "name": "Authentication Bypass by Spoofing" }, "notes": [ { "category": "description", "text": "Spoofing issue in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4728" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2013179", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2013179" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-20/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-20/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-23/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-23/" } ], "release_date": "2026-03-24T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-03-24T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-6760", "cwe": { "id": "CWE-288", "name": "Authentication Bypass Using an Alternate Path or Channel" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-6760" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2016923", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2016923" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-30/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-30/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-33/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-33/" } ], "release_date": "2026-04-21T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-04-21T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-4086", "cwe": { "id": "CWE-451", "name": "User Interface (UI) Misrepresentation of Critical Information" }, "notes": [ { "category": "description", "text": "A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog.\n*This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138 and Thunderbird 138.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-4086" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1945705", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1945705" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-28/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-28/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-31/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-31/" } ], "release_date": "2025-04-29T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2025-04-29T14:15:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-10531", "cwe": { "id": "CWE-288", "name": "Authentication Bypass Using an Alternate Path or Channel" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the Web Compatibility: Tooling component. This vulnerability was fixed in Firefox 143 and Thunderbird 143.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-10531" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1978453", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1978453" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-73/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/" } ], "release_date": "2025-09-16T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2025-09-16T13:15:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-12300", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12300" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1704114", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1704114" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-57/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-60/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/" } ], "release_date": "2026-06-16T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-06-16T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16400", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16400" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050430", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050430" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-6783", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-6783" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2027564", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2027564" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-30/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-30/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-33/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-33/" } ], "release_date": "2026-04-21T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-04-21T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-4092", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138 and Thunderbird 138.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-4092" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1924108%2C1950780%2C1959367", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1924108%2C1950780%2C1959367" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-28/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-28/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-31/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-31/" } ], "release_date": "2025-04-29T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2025-04-29T14:15:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-16410", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "description", "text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16410" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053680", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053680" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-0892", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0892" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1986912%2C1996718%2C1999633%2C2001081%2C2004443", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1986912%2C1996718%2C1999633%2C2001081%2C2004443" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-01/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-04/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/" } ], "release_date": "2026-01-13T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-01-13T14:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16366", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16366" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2049181", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2049181" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16372", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16372" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2013800", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2013800" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16385", "cwe": { "id": "CWE-908", "name": "Use of Uninitialized Resource" }, "notes": [ { "category": "description", "text": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16385" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041912", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041912" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16386", "cwe": { "id": "CWE-908", "name": "Use of Uninitialized Resource" }, "notes": [ { "category": "description", "text": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16386" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041916", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041916" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-4726", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4726" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1955311", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1955311" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-20/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-20/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-23/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-23/" } ], "release_date": "2026-03-24T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-03-24T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-6755", "cwe": { "id": "CWE-352", "name": "Cross-Site Request Forgery (CSRF)" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the DOM: postMessage component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-6755" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1880429", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1880429" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-30/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-30/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-33/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-33/" } ], "release_date": "2026-04-21T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-04-21T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-5272", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 139 and Thunderbird 139.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-5272" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1726254%2C1742738%2C1960121", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1726254%2C1742738%2C1960121" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-42/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-42/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-45/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-45/" } ], "release_date": "2025-05-27T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2025-05-27T13:15:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-12316", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12316" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2045496", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2045496" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-57/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-60/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/" } ], "release_date": "2026-06-16T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-06-16T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16365", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16365" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2049149", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2049149" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-6768", "cwe": { "id": "CWE-288", "name": "Authentication Bypass Using an Alternate Path or Channel" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-6768" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2023615", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2023615" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-30/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-30/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-33/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-33/" } ], "release_date": "2026-04-21T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-04-21T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16384", "cwe": { "id": "CWE-908", "name": "Use of Uninitialized Resource" }, "notes": [ { "category": "description", "text": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16384" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041911", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041911" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16407", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16407" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2044063", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2044063" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-8043", "cwe": { "id": "CWE-451", "name": "User Interface (UI) Misrepresentation of Critical Information" }, "notes": [ { "category": "description", "text": "Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability was fixed in Firefox 141.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8043" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970209", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970209" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/" } ], "release_date": "2025-07-22T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2025-07-22T21:15:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16401", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16401" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2052565", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2052565" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-2801", "cwe": { "id": "CWE-754", "name": "Improper Check for Unusual or Exceptional Conditions" }, "notes": [ { "category": "description", "text": "Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2801" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2009901", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2009901" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/" } ], "release_date": "2026-02-24T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-02-24T14:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-12301", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12301" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2015647", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2015647" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-57/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-60/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/" } ], "release_date": "2026-06-16T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-06-16T13:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16364", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16364" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2047802", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2047802" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16382", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16382" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041864", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041864" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-10530", "cwe": { "id": "CWE-290", "name": "Authentication Bypass by Spoofing" }, "notes": [ { "category": "description", "text": "Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 143 and Thunderbird 143.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-10530" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1974025", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1974025" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-73/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2025-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/" } ], "release_date": "2025-09-16T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2025-09-16T13:15:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-2804", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2804" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2013584", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2013584" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/" } ], "release_date": "2026-02-24T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-02-24T14:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16370", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16370" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996495", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996495" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-16403", "cwe": { "id": "CWE-451", "name": "User Interface (UI) Misrepresentation of Critical Information" }, "notes": [ { "category": "description", "text": "Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-16403" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1972244", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1972244" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-68/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-68/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-71/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-71/" } ], "release_date": "2026-07-21T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-19T05:00:49.059525Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787115646" }, { "category": "none_available", "date": "2026-07-21T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] } ] }