{"id":"CLSA-2026-1792779937","summary":"thunderbird: Fix of 56 CVEs","details":"- update to 153.5.0 ESR (MFSA 2026-103 for 153.4, MFSA 2026-110 for 153.5)\n- drop CVE-2026-100779-CVE-2026-100785.patch and CVE-2026-100781.patch,\n  their fixes are part of 153.5.0\n- stop packaging rnp-cli and rnpkeys: upstream no longer installs\n  them (bug 2068130); librnp.so is still shipped\n- regenerate langpacks from the 153.5.0esr release xpi set (66 languages,\n  the same set as 153.3.1esr)\n- CVE-2026-103500: Heap buffer overflow opening large email\n- CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component\n- CVE-2026-100757: Use-after-free in the Widget component\n- CVE-2026-100758: Sandbox escape in the DOM: Navigation component\n- CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component\n- CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component\n- CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component\n- CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component\n- CVE-2026-100766: Information disclosure in the Networking: JAR component\n- CVE-2026-100767: Use-after-free in the Networking: Cache component\n- CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component\n- CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component\n- CVE-2026-100771: Undefined behavior in the DOM: Streams component\n- CVE-2026-100772: Use-after-free in the DOM: Core & HTML component\n- CVE-2026-100773: Use-after-free in the Storage: IndexedDB component\n- CVE-2026-100774: Use-after-free in the DOM: Core & HTML component\n- CVE-2026-100775: Sandbox escape in the Graphics component\n- CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component\n- CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component\n- CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component\n- CVE-2026-100779: Use-after-free in the XSLT component\n- CVE-2026-100780: Use-after-free in the DOM: Core & HTML component\n- CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component\n- CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component\n- CVE-2026-100783: Uninitialized memory in the Audio/Video component\n- CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component\n- CVE-2026-100785: Use-after-free in the DOM: Core & HTML component\n- CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component\n- CVE-2026-100787: Sandbox escape in the XUL component\n- CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component\n- CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component\n- CVE-2026-100790: Use-after-free in the XSLT component\n- CVE-2026-100791: Use-after-free in the DOM: Core & HTML component\n- CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component\n- CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component\n- CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component\n- CVE-2026-96869: Information disclosure in the Networking component\n- CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component\n- CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component\n- CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component\n- CVE-2026-100801: Privilege escalation in the DLL Services component\n- CVE-2026-100803: Same-origin policy bypass in the WebExtensions component\n- CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component\n- CVE-2026-100807: Privilege escalation in the DOM: Service Workers component\n- CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component\n- CVE-2026-100809: Same-origin policy bypass in the DevTools component\n- CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component\n- CVE-2026-100812: Denial-of-service in the Graphics component\n- CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component\n- CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component\n- CVE-2026-100816: Site isolation issue in the DOM: Networking component\n- CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component\n- CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component\n- CVE-2026-100820: Privilege escalation in the Address Bar component\n- CVE-2026-100821: Site isolation issue in the Panning and Zooming component\n- CVE-2026-100822: Spoofing issue in the Networking: HTTP component\n- CVE-2026-100824: Privilege escalation in the Places component\n- CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component\n- CVE-2026-100826: Denial-of-service in the Storage: StorageManager component\n- CVE-2026-100828: Mitigation bypass in the Bookmarks & History component\n- CVE-2026-100829: Mitigation bypass in the DOM: Security component\n- CVE-2026-100830: Mitigation bypass in the DOM: Navigation component\n- CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component\n- CVE-2026-110249: Denial-of-service in the Exchange email component\n- CVE-2026-109704: Privilege escalation in the Application Update component\n- CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component\n- CVE-2026-109706: Use-after-free in the Storage: IndexedDB component\n- CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component\n- CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component\n- CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component\n- CVE-2026-109710: Use-after-free in the Graphics: Text component\n- CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component\n- CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component\n- CVE-2026-109713: Use-after-free in the Crash Reporting component\n- CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component\n- CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component\n- CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component\n- CVE-2026-109718: Use-after-free in the XML component\n- CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component\n- CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component\n- CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component\n- CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component\n- CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component\n- CVE-2026-109724: Use-after-free in the DOM: Core & HTML component\n- CVE-2026-109725: Use-after-free in the DOM: Core & HTML component\n- CVE-2026-109726: Use-after-free in the SVG component\n- CVE-2026-109727: Use-after-free in the Audio/Video component\n- CVE-2026-109728: Use-after-free in the DOM: Animation component\n- CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component\n- CVE-2026-109730: Integer overflow in the Graphics component\n- CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component\n- CVE-2026-109732: Use-after-free in the DOM: Streams component\n- CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component\n- CVE-2026-109734: Mitigation bypass in the DOM: Security component\n- CVE-2026-109736: Frame poisoning in the Layout component\n- CVE-2026-109737: Mitigation bypass in the Enterprise Policies component\n- CVE-2026-109738: Use-after-free in the Audio/Video: Playback component\n- CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component\n- CVE-2026-109741: Use-after-free in the Storage: Bucket File System component\n- CVE-2026-109742: Information disclosure in the PDF Viewer component\n- CVE-2026-109743: Privilege escalation in the Panning and Zooming component\n- CVE-2026-109744: Other issue in the DOM: File component\n- CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component\n- CVE-2026-109782: Mitigation bypass in the File Handling component\n- CVE-2026-109751: Information disclosure in the Networking component\n- CVE-2026-109752: Use-after-free in the DOM: Workers component\n- CVE-2026-109753: Incorrect boundary conditions in the Layout component\n- CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component\n- CVE-2026-109756: Privilege escalation in the DOM: Navigation component\n- CVE-2026-109757: Sandbox escape due to race condition in the Networking component\n- CVE-2026-109759: Site isolation issue in the Networking component\n- CVE-2026-109760: Mitigation bypass in the Networking: HTTP component\n- CVE-2026-109762: Incorrect boundary conditions in the SVG component\n- CVE-2026-109763: Mitigation bypass in the File Handling component\n- CVE-2026-109764: Mitigation bypass in the Enterprise Policies component\n- CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component\n- CVE-2026-109766: Mitigation bypass in the Enterprise Policies component\n- CVE-2026-109767: Information disclosure in the Networking component\n- CVE-2026-109783: Mitigation bypass in the File Handling component\n- CVE-2026-109770: Spoofing issue in the DOM: Web Serial component\n- CVE-2026-109775: Denial-of-service in the WebRTC component\n- CVE-2026-109776: Race condition in the XPCOM component\n- CVE-2026-109777: Information disclosure in the Storage: IndexedDB component\n- CVE-2026-109778: Privilege escalation in the WebExtensions component\n- CVE-2026-109781: Denial-of-service in the Printing: Output component","modified":"2026-10-26T09:43:19.875538635Z","published":"2026-10-23T18:27:45Z","upstream":["CVE-2026-100756","CVE-2026-100757","CVE-2026-100758","CVE-2026-100759","CVE-2026-100760","CVE-2026-100762","CVE-2026-100765","CVE-2026-100766","CVE-2026-100767","CVE-2026-100769","CVE-2026-100770","CVE-2026-100771","CVE-2026-100772","CVE-2026-100773","CVE-2026-100774","CVE-2026-100775","CVE-2026-100776","CVE-2026-100777","CVE-2026-100778","CVE-2026-100779","CVE-2026-100780","CVE-2026-100781","CVE-2026-100782","CVE-2026-100783","CVE-2026-100784","CVE-2026-100785","CVE-2026-100786","CVE-2026-100787","CVE-2026-100788","CVE-2026-100789","CVE-2026-100790","CVE-2026-100791","CVE-2026-100792","CVE-2026-100794","CVE-2026-100797","CVE-2026-100798","CVE-2026-100800","CVE-2026-100801","CVE-2026-100803","CVE-2026-100806","CVE-2026-100807","CVE-2026-100808","CVE-2026-100809","CVE-2026-100811","CVE-2026-100812","CVE-2026-100814","CVE-2026-100815","CVE-2026-100816","CVE-2026-100818","CVE-2026-100819","CVE-2026-100820","CVE-2026-100821","CVE-2026-100822","CVE-2026-100824","CVE-2026-100825","CVE-2026-100826","CVE-2026-100828","CVE-2026-100829","CVE-2026-100830","CVE-2026-100831","CVE-2026-100832","CVE-2026-103500","CVE-2026-109704","CVE-2026-109705","CVE-2026-109706","CVE-2026-109707","CVE-2026-109708","CVE-2026-109709","CVE-2026-109710","CVE-2026-109711","CVE-2026-109712","CVE-2026-109713","CVE-2026-109715","CVE-2026-109716","CVE-2026-109717","CVE-2026-109718","CVE-2026-109719","CVE-2026-109720","CVE-2026-109721","CVE-2026-109722","CVE-2026-109723","CVE-2026-109724","CVE-2026-109725","CVE-2026-109726","CVE-2026-109727","CVE-2026-109728","CVE-2026-109729","CVE-2026-109730","CVE-2026-109731","CVE-2026-109732","CVE-2026-109733","CVE-2026-109734","CVE-2026-109736","CVE-2026-109737","CVE-2026-109738","CVE-2026-109740","CVE-2026-109741","CVE-2026-109742","CVE-2026-109743","CVE-2026-109744","CVE-2026-109745","CVE-2026-109751","CVE-2026-109752","CVE-2026-109753","CVE-2026-109754","CVE-2026-109756","CVE-2026-109757","CVE-2026-109759","CVE-2026-109760","CVE-2026-109762","CVE-2026-109763","CVE-2026-109764","CVE-2026-109765","CVE-2026-109766","CVE-2026-109767","CVE-2026-109770","CVE-2026-109775","CVE-2026-109776","CVE-2026-109777","CVE-2026-109778","CVE-2026-109781","CVE-2026-109782","CVE-2026-109783","CVE-2026-110249","CVE-2026-96869"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1792779937.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100756"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100757"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100758"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100759"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100760"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100762"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100765"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100766"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100767"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100769"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100770"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100771"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100772"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100773"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100774"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100775"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100776"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100777"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100778"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100780"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100782"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100783"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100785"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100787"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100788"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100789"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100790"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100791"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100792"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100794"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100797"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100801"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100803"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100807"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100808"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100809"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100811"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100812"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100814"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100815"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100816"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100818"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100819"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100820"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100821"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100822"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100824"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100825"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100826"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100828"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100829"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100830"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100831"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100832"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103500"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96869"}],"affected":[{"package":{"name":"thunderbird","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/thunderbird?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.0-1.el9_2.alma.1.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792779937.json"}}],"schema_version":"1.9.0"}