Astra Linux – Vulnerability in Firefox and Thunderbird

The application failed to account for exceptions thrown by the loadManifestFromFile method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the...

[SECURITY] Fedora 43 Update: firefox-157.0-1.fc43

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 44 Update: firefox-157.0-1.fc44

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 45 Update: firefox-157.0-1.fc45

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

perceval-mozilla (>=0.3.2rc1, <=0.3.2rc2), qgis-deployment-toolbelt (>=0.8.0, <=0.10.0) potentially affected by unknown CVE via dulwich (0.20.35)

dulwich PYPI version 0.20.35 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - perceval-mozilla =0.3.2rc1, =0.8.0, =0.10.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

kingarthur (0.2.2rc3), lookout-sdk-ml (0.4.3) +5 more potentially affected by unknown CVE via dulwich (0.20.45)

dulwich PYPI version 0.20.45 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - kingarthur 0.2.2rc3 - lookout-sdk-ml 0.4.3 - perceval =0.20.0rc4, =0.20.0rc5 - perceval-mozilla 0.3.2rc3 - perceval-opnfv 0.2.2rc3 -...

kingarthur (0.2.2rc3), lookout-sdk-ml (0.4.3) +5 more potentially affected by unknown CVE via dulwich (0.20.45)

dulwich PYPI version 0.20.45 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - kingarthur 0.2.2rc3 - lookout-sdk-ml 0.4.3 - perceval =0.20.0rc4, =0.20.0rc5 - perceval-mozilla 0.3.2rc3 - perceval-opnfv 0.2.2rc3 -...

perceval-mozilla (>=0.3.2rc1, <=0.3.2rc2), qgis-deployment-toolbelt (>=0.8.0, <=0.10.0) potentially affected by unknown CVE via dulwich (0.20.35)

dulwich PYPI version 0.20.35 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - perceval-mozilla =0.3.2rc1, =0.8.0, =0.10.0 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

CVE-2026-100763

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100761

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100805

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100768

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002 2026-10-07 07:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mxbgrdqct62h...

CVE-2026-100793

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100796

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100799

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100810

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100817

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-103500

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100795

creationtimestamp| type| source ---|---|--- 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

RLSA-2026:73971 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client component CVE-2026-75874 firefox: Sandbox escape due to...