{"id":"CLSA-2026-1781204847","summary":"thunderbird: Fix of 7 CVEs","details":"- CVE-2026-6757: invalid pointer in wasm debug frames; add\n  DebugEnvironments::onPopWasm to clean up the debug environment on pop\n- CVE-2026-6761: privilege escalation; enforce prefs for dom TCP and\n  UDP sockets at the parent-process IPC entry points\n- CVE-2026-6764: out-of-bounds read; validate HID report length in\n  Dualshock4Remapper::ProcessTouchData\n- CVE-2026-6771: CSP 'strict-dynamic' mitigation bypass; treat XSLT as\n  parser-created so 'strict-dynamic' no longer auto-allows it\n- CVE-2026-8963: Web Speech spoofing; cancel SpeechSynthesis on\n  navigation by overriding DisconnectFromOwner\n- CVE-2026-8965: information disclosure; pass the right sanitization\n  kind through SanitizeInlineStyle (conditional CSS)\n- CVE-2026-8971: Networking JAR same-origin bypass; reject jar entry\n  names containing an embedded NUL","modified":"2026-10-26T09:30:20.290785421Z","published":"2026-06-11T19:07:55Z","upstream":["CVE-2026-6757","CVE-2026-6761","CVE-2026-6764","CVE-2026-6771","CVE-2026-8963","CVE-2026-8965","CVE-2026-8971"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1781204847.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6757"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6761"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6764"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6771"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8963"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8965"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8971"}],"affected":[{"package":{"name":"thunderbird","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/thunderbird?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.4.1-1.el9_2.alma.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1781204847.json"}}],"schema_version":"1.9.0"}