[SECURITY] [DLA 4727-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4727-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 10, 2026 https://wiki.debian.org/LTS -...

Widget Component DoS

The vulnerability of the Widget component: The Firefox web browser and Thunderbird email client have a vulnerability related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow an attacker to cause service failures...

Cookies Component Firefox Thunderbird DoS

The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

WebRTC Audio Video DoS

The vulnerability of the WebRTC component: The Audio/Video features in the Firefox web browser and the Thunderbird email client are related to insecure privilege management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Protection component Confidential Data Access

The vulnerability of the Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

Networking component: The JAR

Vulnerability of the Networking component: The JAR web browser Firefox and the email client Thunderbird are vulnerable due to a lack of source verification mechanism. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

Firefox Thunderbird DoS

The vulnerability of the postMessage component in the Firefox web browser and the Thunderbird email client is related to the。 Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Firefox Thunderbird Security Bypass

The vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...

Graphics component WebGPU Firefox Thunderbird Confidential Data Access

The vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client involves the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

[SECURITY] [DLA 4726-1] ca-certificates CA certificate update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4726-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès August 09, 2026 https://wiki.debian.org/LTS -...

Debian dla-4726 : ca-certificates - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4726 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4726-1 [email protected]...

EulerOS 2.0 SP15 : ca-certificates (EulerOS-SA-2026-2877)

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

CLSA-2026-1771459787 TuxCare security update for org.mozilla:rhino (1 CVE)

TuxCare rebuilt org.mozilla:rhino to address 1 CVE. Fixed in 1.7.10-tuxcare.1...

atlassian-jwt-auth (>=2.10.1, <=3.0.1), mitmproxy (>=2.0.1, <=2.0.2) +10 more potentially affected by CVE-2026-69248 via cryptography (1.8.2)

cryptography PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.10.1, =2.0.1, =0.1.2, =0.4.0, =0.0.1, =1.3.6, =2.4.6, =1.1.1, =1.4.0, =1.5.0 Source cves: CVE-2026-69248 Source...

firefox: thunderbird: Privilege escalation in WebExtensions

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in WebExtensions...

firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Navigation component...

firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the DOM: Bindings WebIDL component...

firefox: thunderbird: Privilege escalation in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...

firefox: thunderbird: Information disclosure in the Framework component in DevTools

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Framework component in DevTools...