MozillaThunderbird-153.5.1-1.1 on GA media (moderate)

MozillaThunderbird-153.5.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:12224-1 Rating: moderate Cross-References: CVE-2026-109704 CVE-2026-109705 CVE-2026-109706 CVE-2026-109707 CVE-2026-109708 CVE-2026-109709 CVE-2026-109710 CVE-2026-109711 CVE-2026-109712 CVE-2026-109713 CVE-2026-109715...

RLSA-2026:93443 Important: thunderbird security, bug fix, and enhancement update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764 firefox: Spoofing issue in the DOM: Web Serial component CVE-2026-109770...

Important: thunderbird security, bug fix, and enhancement update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764 firefox: Spoofing issue in the DOM: Web Serial component CVE-2026-109770...

ALSA-2026:93443 Important: thunderbird security, bug fix, and enhancement update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764 firefox: Spoofing issue in the DOM: Web Serial component CVE-2026-109770...

[SECURITY] Fedora 45 Update: thunderbird-158.0-2.fc45

Mozilla Thunderbird is a standalone mail and newsgroup client...

RLSA-2026:90913 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox:...

PT-2026-134764

These are all security issues fixed in the MozillaThunderbird-153.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Thunderbird security vulnerabilities

Versions prior to 159 and 153.6 of Mozilla Thunderbird contain a security vulnerability. This vulnerability arises because messages containing OpenPGP key attachments are automatically loaded, without any restrictions on marking such attachments as external files pointing to arbitrary URLs. As a...

Mozilla Thunderbird security vulnerabilities

Versions prior to 159 and 153.6 of Mozilla Thunderbird contain a security vulnerability. This vulnerability arises because a remote RSS feed can permanently change the stored subscription URL to a file: URL via the itunes:new-feed-url or newLocation elements. As a result, Thunderbird reads this...

Mozilla Firefox security vulnerabilities

Mozilla Firefox and Mozilla Thunderbird contain a security vulnerability stemming from a use-after-free issue in the Audio/Video component...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 115.44, and Mozilla Firefox ESR versions prior to 153.6, as well as in Mozilla Thunderbird versions prior to 159 and Mozilla Thunderbird versions prior to 153.6. This vulnerability stem...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 153.6, Mozilla Thunderbird versions prior to 159, and Mozilla Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Layout: Text and Fonts...

KLA91377 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 115.44, Mozilla Firefox ESR versions prior to 153.6, Mozilla Thunderbird versions prior to 159, and Mozilla Thunderbird versions prior to 153.6. This vulnerability stems from a...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 153.6, Mozilla Thunderbird versions prior to 159, and Mozilla Thunderbird versions prior to 153.6. This vulnerability stems from an invalid pointer in the Graphics component...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 153.6, Mozilla Thunderbird versions prior to 159, and Mozilla Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Graphics component, which m...

ALSA-2026:90913 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox:...

ALSA-2026:90895 Important: thunderbird security, bug fix, and enhancement update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libexpat: denial of service via crafted XML input CVE-2026-45186 Bug Fixes and Enhancements: Thunderbird ESR 153 rebase rhel-10.2.z JIRA:RHEL-175207 For more details about the security issues, including the impact, a...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox:...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 115.44 and 153.6, as well as Mozilla Thunderbird versions prior to 153.6 and 159. This vulnerability stems from use-after-free issues in the DOM Editor component, which may lead to memo...