{"id":"CLSA-2026-1791305177","summary":"thunderbird: Fix of 65 CVEs","details":"- update to 153.3.1 ESR (MFSA 2026-96)\n- 153.3.1 is a respin of 153.3 and carries no security content of its own;\n  every fix listed below comes from 153.3\n- regenerate langpacks from the 153.3.1esr release xpi set (66 languages,\n  the same set as 153.2.0esr)\n- CVE-2026-92238: Ambiguous parsing of mail headers\n- CVE-2026-92239: Buffer overrun in IMAP\n- CVE-2026-92240: Out-of-bounds read in IMAP response parser\n- CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component\n- CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92015: Privilege escalation in the WebExtensions component\n- CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component\n- CVE-2026-92016: Use-after-free in the Disability Access APIs component\n- CVE-2026-92017: Privilege escalation in the DOM: Service Workers component\n- CVE-2026-92018: Sandbox escape in the DOM: Core & HTML component\n- CVE-2026-92019: Mitigation bypass in the Remote Settings Client component\n- CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component\n- CVE-2026-92022: Use-after-free in the DOM: HTML Parser component\n- CVE-2026-92023: Use-after-free in the XML component\n- CVE-2026-92024: Use-after-free in the SVG component\n- CVE-2026-92025: Use-after-free in the DOM: Navigation component\n- CVE-2026-92026: Use-after-free in the Networking component\n- CVE-2026-92027: Use-after-free in the DOM: Streams component\n- CVE-2026-92028: Use-after-free in the DOM: Core & HTML component\n- CVE-2026-92029: Use-after-free in the SVG component\n- CVE-2026-92030: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component\n- CVE-2026-92031: Information disclosure in the Graphics: ImageLib component\n- CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component\n- CVE-2026-92038: Mitigation bypass in the Remote Settings Client component\n- CVE-2026-92039: Mitigation bypass in the DOM: Notifications component\n- CVE-2026-92041: Mitigation bypass in the DOM: Networking component\n- CVE-2026-92042: Race condition in the DOM: Content Processes component\n- CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component\n- CVE-2026-92044: Information disclosure in the Networking: HTTP component\n- CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component\n- CVE-2026-92046: Use-after-free in the Graphics component\n- CVE-2026-92047: Privilege escalation in the Crash Reporting component\n- CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component\n- CVE-2026-92049: Use-after-free in the Widget: Win32 component\n- CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component\n- CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component\n- CVE-2026-92054: Privilege escalation in the Memory component\n- CVE-2026-92055: Privilege escalation in the DevTools component\n- CVE-2026-92056: Use-after-free in the Graphics: Text component\n- CVE-2026-92057: Mitigation bypass in the Enterprise Policies component\n- CVE-2026-92058: Use-after-free in the Graphics component\n- CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component\n- CVE-2026-92060: Use-after-free in the Internationalization component\n- CVE-2026-92062: Privilege escalation in the Session Restore component\n- CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component\n- CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component\n- CVE-2026-92067: Use-after-free in the Widget: Gtk component\n- CVE-2026-92068: Site isolation issue in the Reader Mode component\n- CVE-2026-92069: Spoofing issue in the DOM: Navigation component\n- CVE-2026-92070: Information disclosure in the Networking component\n- CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component\n- CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component\n- CVE-2026-92073: Privilege escalation in the Enterprise Policies component\n- CVE-2026-92074: Mitigation bypass in the Popup Blocker component\n- CVE-2026-92075: Mitigation bypass in the Networking component\n- CVE-2026-92076: Incorrect boundary conditions in the Networking component\n- CVE-2026-92077: Denial-of-service in the SVG component\n- CVE-2026-92078: Denial-of-service in the Security component\n- CVE-2026-92079: Mitigation bypass in the Widget: Win32 component","modified":"2026-10-26T09:43:50.462035097Z","published":"2026-10-18T14:46:04Z","upstream":["CVE-2026-92005","CVE-2026-92006","CVE-2026-92007","CVE-2026-92008","CVE-2026-92009","CVE-2026-92010","CVE-2026-92011","CVE-2026-92012","CVE-2026-92013","CVE-2026-92015","CVE-2026-92016","CVE-2026-92017","CVE-2026-92018","CVE-2026-92019","CVE-2026-92020","CVE-2026-92022","CVE-2026-92023","CVE-2026-92024","CVE-2026-92025","CVE-2026-92026","CVE-2026-92027","CVE-2026-92028","CVE-2026-92029","CVE-2026-92030","CVE-2026-92031","CVE-2026-92032","CVE-2026-92035","CVE-2026-92038","CVE-2026-92039","CVE-2026-92041","CVE-2026-92042","CVE-2026-92043","CVE-2026-92044","CVE-2026-92045","CVE-2026-92046","CVE-2026-92047","CVE-2026-92048","CVE-2026-92049","CVE-2026-92052","CVE-2026-92053","CVE-2026-92054","CVE-2026-92055","CVE-2026-92056","CVE-2026-92057","CVE-2026-92058","CVE-2026-92059","CVE-2026-92060","CVE-2026-92062","CVE-2026-92064","CVE-2026-92065","CVE-2026-92067","CVE-2026-92068","CVE-2026-92069","CVE-2026-92070","CVE-2026-92071","CVE-2026-92072","CVE-2026-92073","CVE-2026-92074","CVE-2026-92075","CVE-2026-92076","CVE-2026-92077","CVE-2026-92078","CVE-2026-92079","CVE-2026-92238","CVE-2026-92239","CVE-2026-92240"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791305177.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84128"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84142"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92005"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92007"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92008"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92009"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92010"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92013"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92015"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92016"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92017"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92018"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92019"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92020"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92022"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92023"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92024"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92025"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92026"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92027"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92028"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92029"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92030"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92031"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92032"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92035"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92038"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92039"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92041"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92042"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92043"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92044"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92045"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92046"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92047"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92048"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92049"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92052"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92053"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92054"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92055"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92056"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92057"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92058"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92059"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92060"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92062"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92064"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92065"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92067"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92068"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92069"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92070"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92071"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92072"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92073"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92074"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92075"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92076"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92077"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92078"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92079"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92238"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92239"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92240"}],"affected":[{"package":{"name":"thunderbird","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/thunderbird?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.1-1.el9_2.alma.1.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791305177.json"}}],"schema_version":"1.9.0"}