ALSA-2026:90913 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox:...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox:...

RLSA-2026:80674 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox: Use-after-free in the Layout: Text and Fonts component CVE-2026-100784 firefox: thunderbird: Privilege escalation in the...

RLSA-2026:80694 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox: Use-after-free in the Layout: Text and Fonts component CVE-2026-100784 firefox: thunderbird: Privilege escalation in the...

OESA-2026-4457 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird...

OESA-2026-4458 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird...

PT-2026-122448

These are all security issues fixed in the MozillaThunderbird-153.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

MozillaThunderbird-153.4.0-1.1 on GA media (moderate)

MozillaThunderbird-153.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12098-1 Rating: moderate Cross-References: CVE-2026-100756 CVE-2026-100757 CVE-2026-100758 CVE-2026-100759 CVE-2026-100760 CVE-2026-100762 CVE-2026-100765 CVE-2026-100766 CVE-2026-100767 CVE-2026-100769 CVE-2026-100770...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.17.0esr-i686-2slack15.0.txz: Rebuilt. This update fixes a security issue: Build --with-system-zl...

RHEL 10 : thunderbird (RHSA-2026:81392)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:81392 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Use-after-free in the SVG component...

RHEL 9 : thunderbird (RHSA-2026:81884)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:81884 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Use-after-free in the SVG component...

Mozilla Thunderbird < 158.0.1

The version of Thunderbird installed on the remote Windows host is prior to 158.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-114 advisory. - Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was...

Mozilla Thunderbird < 153.5.1

The version of Thunderbird installed on the remote Windows host is prior to 153.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-115 advisory. - Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was...

Mozilla Thunderbird < 153.5.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-115 advisory. - Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2026-293-05)

The version of mozilla-thunderbird installed on the remote host is prior to 140.17.0esr / 153.5.1esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-293-05 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2026:4736-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4736-1 advisory. Update to Mozilla Thunderbird 153.5 MFSA 2026-110, bsc1284493: - CVE-2026-109704: Privilege escalation in the...

KLA91360 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability can be exploited to bypass securit...

KLA91364 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Security vulnerability can be exploited to bypass security restrictions. 2...

Mozilla Thunderbird buffer error vulnerability

Versions of Mozilla Thunderbird prior to 158.0.1 and 153.5.1 contain a buffer error vulnerability. This vulnerability arises from the lack of verification that the server challenge is a valid base64-encoded value when using NTLM authentication for POP3 or SMTP servers. Malicious servers can send...

Mozilla Thunderbird security vulnerabilities

Versions of Mozilla Thunderbird prior to 158.0.1 and 153.5.1 have a security vulnerability. This vulnerability stems from the lack of escaping of attribute values during the serialization of outbound XMPP stanzas. Values passed in incoming requests are also passed back automatically. A remote XMP...